last executing test programs: 13m30.808229955s ago: executing program 32 (id=658): open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x18d883, 0x0) 13m7.852751914s ago: executing program 33 (id=1145): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf, 0x9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12m9.896427453s ago: executing program 34 (id=2738): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x44) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) 12m6.272024059s ago: executing program 35 (id=2812): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/../file0/../file0\x00', 0x0, 0x8c000, 0x0) 12m4.058642568s ago: executing program 36 (id=2842): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) r0 = io_uring_setup(0x54a0, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000540)=[0x3, 0x9], 0x2) 12m3.688805908s ago: executing program 37 (id=2847): socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x19, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) write$cgroup_devices(r1, 0x0, 0x9) 11m52.230570362s ago: executing program 38 (id=3012): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xeb3}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xe}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000092}, 0x80) 11m22.414726584s ago: executing program 39 (id=3553): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001f80)={@fallback, r1, 0x2f, 0x0, 0x4, @void, @value=r0}, 0x20) 11m10.958917259s ago: executing program 40 (id=3739): syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400244}, 0x0, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000340)=0x3) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, &(0x7f0000000000)={0x18, 0x8, 0x6, 0x0, 0x7, 0x400000}, 0x0, 0x0, 0x0) 11m6.861562327s ago: executing program 41 (id=3793): ppoll(&(0x7f0000001040)=[{0xffffffffffffffff, 0xc103}], 0x1, &(0x7f0000001080)={0x77359400}, &(0x7f00000010c0)={[0x6]}, 0x8) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) 9m57.102025619s ago: executing program 42 (id=5056): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 9m7.100637777s ago: executing program 43 (id=5722): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x14, 0xa, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) 9m4.928674495s ago: executing program 44 (id=5950): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) shutdown(r0, 0x1) 8m56.400050832s ago: executing program 45 (id=6076): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000541000/0x4000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000064e000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x60, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x4, 0x6, 0xffff, 0x8251c, 0x2, 0x9}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r0 = io_uring_setup(0xc61, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x0, 0x20002f6}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}}, 0x8004) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 8m42.284641736s ago: executing program 46 (id=6305): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x40000) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x1d, r1, 0x0, 0x4000}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4004851}, 0x4004001) 8m11.467087624s ago: executing program 47 (id=6861): socket$qrtr(0x2a, 0x2, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0xffffffff}, 0x1c) socket$inet_sctp(0x2, 0x1, 0x84) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x2b, 0xb, 0x53, 0x5, 0x0, 0x4, 0x0, 0x13, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_bp={&(0x7f0000000440), 0x1}, 0x20, 0x10001, 0x21382424, 0x3, 0x5, 0x2, 0x7fff, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x5add, &(0x7f0000000440)={0x0, 0x231a, 0x100, 0xffffffff, 0xd}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000000)) 8m5.9771632s ago: executing program 48 (id=6965): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) mount$9p_fd(0x0, &(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000040), 0x1004014, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 7m34.395424859s ago: executing program 49 (id=7387): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x190, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="02017d29012918050e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e21082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c0a4c8303a0f7fbda34fb8825f80200e3c0aba61ffdfa424e37a4516e88faca"], 0xdd12}], 0x1}, 0x40) 7m22.401721697s ago: executing program 50 (id=7596): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x28040) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x51cfa, 0x0, 0x8000008, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000000)={0x800000, 0xffffffff, 0x2, 0x2, 0x1101, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000140)={0x800000, 0x4, 0x80000000, 0x0, 0x10000002, 0x800055a}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000300)=[{0x6, 0x9, 0xfb, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 7m9.703547814s ago: executing program 51 (id=7809): syz_open_dev$tty20(0xc, 0x4, 0x1) close(0x3) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000009c0), r0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8405d22596f37403}, 0x4054) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r2, &(0x7f0000000000), 0x0}, 0x20) 6m33.894138424s ago: executing program 52 (id=8420): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) unshare(0x6020400) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) 6m2.058240578s ago: executing program 6 (id=9025): inotify_init1(0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6m2.014333729s ago: executing program 6 (id=9028): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0x5}, 0x105902, 0x10003, 0x33f8, 0x1, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1c}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001"], 0x110) 6m1.97938504s ago: executing program 6 (id=9030): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000050) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r1, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r0}, 0x20) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000800)=""/244, 0xf4}], 0x1}, 0x1}], 0x2, 0x40018022, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) 6m1.921301951s ago: executing program 6 (id=9032): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000240)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7ffffffffffffffd, 0x8005, 0x0, 0x0, 0x13, 0xd, "ef359f413bb93852f7d6a4ae6dddbbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafaf3afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359628e45668100e3700000e6d60200cd8ffe000000000000000100", [0x4204]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x189800, 0x9b) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x208201, 0x9a) 6m1.762572126s ago: executing program 6 (id=9034): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, 0xec2bd, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0x800000000100}, 0x2402, 0x0, 0x43a1bd78, 0x7, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) membarrier(0x10, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r2) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 6m1.652686268s ago: executing program 6 (id=9037): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x4, {{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 6m1.6128075s ago: executing program 53 (id=9037): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x4, {{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 4m46.223040357s ago: executing program 0 (id=10350): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400000000ff88da66b4000000", @ANYRES32=0x0, @ANYBLOB="142202000089000008000300", @ANYRES32=r2, @ANYBLOB="1c001280090001007866726d000000000c0002800800020004"], 0x44}, 0x1, 0xd, 0x0, 0x480c5}, 0x20000000) 4m46.175829629s ago: executing program 0 (id=10352): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x2000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x4}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x48, 0x2, [@TCA_BASIC_EMATCHES={0x44, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x24, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR='3']}]}}]}]}]}}]}, 0x78}}, 0x0) 4m46.133394219s ago: executing program 0 (id=10354): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "0457b3bf87c2db32", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "74910800b6b15e11"}, 0x28) writev(r0, &(0x7f0000003a80)=[{&(0x7f0000000540)="bd04d11760", 0x5}, {0x0}], 0x2) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000001980)=""/4099, 0xff1}], 0x1) 4m46.083492171s ago: executing program 0 (id=10355): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r0, 0x0, 0x2000007ff) 4m46.042414692s ago: executing program 0 (id=10356): r0 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) unshare(0x22020400) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) fcntl$lock(r1, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9}) close_range(r0, 0xffffffffffffffff, 0x0) 4m45.064944787s ago: executing program 0 (id=10371): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xffff, 0x9}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_POLICE={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048084}, 0x0) 4m45.023653759s ago: executing program 54 (id=10371): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xffff, 0x9}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_POLICE={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048084}, 0x0) 3m59.719638199s ago: executing program 9 (id=11081): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20) recvmmsg(r1, &(0x7f0000003280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/205, 0xcd}], 0x1}, 0x9}], 0x1, 0x7, 0x0) 3m58.732885365s ago: executing program 9 (id=11088): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000240)=0xf2c, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000100000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) setxattr$system_posix_acl(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="02000000"], 0xff3c, 0x1) 3m57.80492979s ago: executing program 9 (id=11094): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0x9362, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x200001, 0x0) 3m57.736653992s ago: executing program 9 (id=11095): prctl$PR_SET_DUMPABLE(0x4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000500)='./file0\x00', 0x1000000, &(0x7f00000018c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES16=0x0], 0xfe, 0x1b2, &(0x7f0000000580)="$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") socket(0x10, 0x2, 0x0) r0 = syz_clone(0x82008400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000b40)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) syz_open_procfs(r0, &(0x7f0000000440)='attr/prev\x00') 3m57.375088421s ago: executing program 9 (id=11097): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0xfffffdef}, 0x1, 0x0, 0x0, 0x4800}, 0x11) 3m56.613565531s ago: executing program 9 (id=11104): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_enter(0xffffffffffffffff, 0x8af, 0xc0b8, 0x0, &(0x7f0000000100)={[0x6]}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x7) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m56.569748072s ago: executing program 55 (id=11104): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_enter(0xffffffffffffffff, 0x8af, 0xc0b8, 0x0, &(0x7f0000000100)={[0x6]}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x7) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m40.856733909s ago: executing program 4 (id=11364): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x17, &(0x7f0000000a00)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0007000140020203600e4109000800ac00060311000000160012000a00fc000000035c3b61c1d67f6f94007134cf6e8c0000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x3081bf0b056d2e46) 3m39.862065855s ago: executing program 4 (id=11376): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x100000001}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) migrate_pages(0x0, 0xfc, &(0x7f0000000200)=0x7ffffffffffffffd, &(0x7f0000000240)=0x1) set_mempolicy(0x3, 0x0, 0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 3m38.644409067s ago: executing program 4 (id=11385): perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x40408c0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f0, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x20}, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) 3m38.583091559s ago: executing program 4 (id=11388): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0xf5, 0x20000}, 0x20) 3m38.365001774s ago: executing program 4 (id=11395): r0 = io_uring_setup(0x7d95, &(0x7f0000000940)={0x0, 0xdf07, 0x40, 0x1, 0x91}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x1000003, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r1, &(0x7f0000000840)=""/40, 0x28) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0xd, @tick=0x9, 0x40, {0xc0, 0xff}, 0x42, 0x1, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 3m38.032845334s ago: executing program 4 (id=11399): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000009c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={&(0x7f0000000180), 0x6e, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x22fe0}], 0x12}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x2afe0}], 0x1}, 0x0) 3m38.032706854s ago: executing program 56 (id=11399): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000009c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={&(0x7f0000000180), 0x6e, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x22fe0}], 0x12}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x2afe0}], 0x1}, 0x0) 2m39.127466564s ago: executing program 1 (id=12204): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x7, 0x0, 0x1, 0x4, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x908d, 0xe}, 0x7000, 0x2, 0x0, 0x1, 0x0, 0xa, 0xffff, 0x0, 0x4}, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$kcm(r0, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000ef029dd2b97576b11d210a"], 0x33fe0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r2, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r2, 0x4) 2m39.011879757s ago: executing program 1 (id=12206): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_secret(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000140001032dbd7000fedbdf250c00000008000400", @ANYRES32=0x0, @ANYBLOB="f56768a6f43f434c2a94d1687ae7f87fd7a5f1e5af18ab45de2b67d3c74ae0b7c34f39f13985a4654579b76cb1a49412a2c45f7967d0c0cab08fea57a9505586a5b816f58df70cc20dae5ef48f3084ce2329f3d1fae91e1daf820bdb32e904000000000000007682c4ba73b21c82a88d653296fdfaea2efc4e213f6c31b31c2d62b73560a5f22dca6103f3bf3b841ac09ad186fd9aa0dd7685ea8299efa550fac9178fea7bfa872b29848216fcd1886f6a7ffcac5d51ea24cd3884525960036c8bcd4d554dffe07cc90029349453c829b2455c283ad82008729c2146f6555f87218732"], 0x1c}}, 0x20008080) ptrace$pokeuser(0x6, r0, 0x388, 0x7a092814) ptrace$pokeuser(0x6, r0, 0x358, 0xffffffeffffffffe) fsopen(&(0x7f0000000000)='autofs\x00', 0x0) 2m38.845374521s ago: executing program 1 (id=12208): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae0b8abace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000240)=0x14f5, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 2m38.707911905s ago: executing program 1 (id=12220): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x40000, 0x0) 2m38.639750657s ago: executing program 1 (id=12211): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, 0x0) 2m38.020961773s ago: executing program 1 (id=12224): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000300)="bc", 0x1}], 0x1) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r1, 0x402, 0x1a) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) tee(r2, r3, 0x3, 0x0) 2m37.986996864s ago: executing program 57 (id=12224): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000300)="bc", 0x1}], 0x1) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r1, 0x402, 0x1a) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) tee(r2, r3, 0x3, 0x0) 5.408588516s ago: executing program 7 (id=14023): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x400, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e01b3989dd"], 0x1000f) 4.612830168s ago: executing program 2 (id=14031): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) write$tun(r0, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) socket$inet6(0xa, 0x805, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900"], 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 4.545845069s ago: executing program 7 (id=14033): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) write$tun(r0, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) fchdir(r2) chdir(&(0x7f0000000080)='./file0\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) 4.479655201s ago: executing program 2 (id=14034): r0 = socket(0x40000000015, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x20000036, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x1, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = gettid() perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x4, 0x8, 0x7f, 0x8, 0x0, 0xfffffffffffffffd, 0x24, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000080), 0x4}, 0xc500, 0xffffffffffff0001, 0x8, 0x7, 0x6, 0x8, 0x8000, 0x0, 0x2, 0x0, 0x4}, r2, 0xc, 0xffffffffffffffff, 0x0) capset(0x0, 0x0) close(r1) getsockopt(r0, 0x200000000114, 0x271d, 0x0, &(0x7f0000000400)) 4.453293121s ago: executing program 2 (id=14035): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000940)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.083793522s ago: executing program 2 (id=14040): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) lsm_set_self_attr(0x69, 0x0, 0xae, 0x0) r0 = socket(0x28, 0x5, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_bp={0x0}, 0x800, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x4, 0x7ffc0001}]}) fstatfs(r1, &(0x7f00000001c0)=""/69) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x4}, {}, {0x2, 0xe}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x3, 0x8, 0x0, 0x100, 0x9, 0xffffffff, 0x3, 0x0, 0x7fff, 0x8000, 0x3a, 0x7, 0x3, 0x8, 0x1, 0x6, 0x2, 0x5, 0xfffffff9, 0x9, 0x3c96, 0x5, 0x8, 0x404, 0x7fff, 0x3, 0x3, 0x6, 0x1ff, 0x6, 0x0, 0x2, 0x74ba, 0x40, 0x35e, 0x6, 0x8000c, 0x6, 0x6, 0x5, 0x3, 0x20003, 0x0, 0xc66, 0x7fff, 0xc9, 0xb, 0x1, 0x0, 0x80000000, 0x1, 0x4d, 0x29da, 0x2, 0xfc, 0x3, 0x3, 0x800, 0xc, 0x8, 0x2, 0xd, 0x5, 0x400, 0xc, 0x0, 0xfff, 0x1, 0x7, 0x7, 0x2, 0xbce6, 0x1, 0x4, 0x9, 0x79, 0xfffff801, 0x6, 0x4, 0x10001, 0x9, 0xffff, 0x94, 0x80, 0xc8, 0x5f72, 0x80000000, 0x5, 0x3, 0x4b1, 0xc, 0x1, 0xeac, 0xf85, 0x373, 0x0, 0x3, 0x7fff, 0x9, 0x5, 0x20009, 0x3, 0x6, 0x1ff, 0x1ff, 0xc, 0x0, 0x8, 0x80000000, 0x6, 0x8, 0x39, 0xa, 0x0, 0x401, 0x14e, 0x9, 0x40, 0x80, 0x3, 0xd4, 0x800, 0x23, 0x6, 0x9, 0x3a9, 0xfc7, 0xd, 0x0, 0x80000001, 0x9, 0x6, 0x2, 0xffffb6d4, 0x8, 0x100, 0x7, 0x3e0000, 0x0, 0x401, 0x7, 0x100, 0x80000000, 0x4, 0x7, 0x3, 0xcf800, 0x2b9c, 0x21000, 0xfffffff8, 0x3, 0xffffd848, 0x4, 0x10, 0x0, 0x0, 0x4, 0x402, 0xaf2, 0x3, 0x6ea, 0x4004, 0x1, 0xc81, 0x9, 0x7, 0x5653, 0xffffffff, 0x6, 0x5, 0x7, 0x10000, 0x7, 0x95, 0x10001, 0x7, 0x5248, 0x6, 0xe08b, 0x5, 0x7ff, 0xce, 0x5, 0x0, 0x9, 0x1000, 0x4, 0x0, 0x3, 0x4, 0xc, 0x3fed, 0x5, 0x50ce, 0x3, 0x9, 0x6, 0x8, 0x5, 0xfffffff7, 0x2, 0x1ff, 0x200, 0x3, 0x8, 0x10, 0x6, 0xa4, 0x5, 0xffffffff, 0xd65e, 0x7, 0x80, 0x2, 0x200, 0x8, 0xb56, 0x10000005, 0x7, 0xe, 0x800d523, 0x80, 0x1, 0x7, 0x9, 0xfffffff5, 0x0, 0x2, 0x7fff, 0x9a, 0x2, 0x800, 0x0, 0x1, 0x5, 0xfffffffe, 0x5, 0xffffffc0, 0x5ea, 0x800, 0x6d6ae3f8, 0x80000000, 0xc, 0x1, 0x1000, 0x8, 0x3, 0x8020000, 0x5, 0x6, 0xfffffffe, 0x71, 0x8001, 0x0, 0x1, 0xd2f3]}, @TCA_TBF_PTAB={0x404, 0x3, [0x1, 0x800, 0x1, 0x4, 0x53a, 0x4, 0x5, 0x3, 0x40, 0x3, 0x4, 0x10, 0x8a37, 0xb0, 0x10000, 0x400, 0xe771, 0x1, 0x2, 0x5, 0x1, 0xffffffff, 0x10, 0xc, 0x1, 0x1, 0x3, 0x2, 0x6, 0x6, 0x832, 0x9, 0x5d0f, 0x2, 0x1, 0x80000000, 0x8001, 0x4, 0x946d, 0x7ff, 0x10001, 0x1ff, 0x5, 0x5, 0x0, 0x4, 0x400, 0x1, 0x200, 0x8, 0x7, 0x3, 0xffffff92, 0x4d02d253, 0x2, 0x6, 0x9, 0x2, 0x935a59f1, 0x9, 0x5, 0x6, 0x8, 0xffffff07, 0x8001, 0xde, 0x9, 0x6, 0x1000, 0x5, 0x3, 0x1, 0x2, 0x5, 0x1, 0xfd2, 0x0, 0x9, 0x9, 0x914, 0x8001, 0x3d, 0x5, 0xda98, 0x2, 0x9efc, 0x9, 0xffffffff, 0x3, 0x3, 0x3ff, 0x7, 0x7, 0x5, 0x20000000, 0x65, 0xd9, 0xec96, 0x200, 0x6, 0x5, 0x6, 0x1, 0x5, 0x40, 0x7, 0x200, 0x0, 0x4, 0x7f, 0x4, 0x401, 0x9, 0x8001, 0xd2, 0x19d, 0x80000001, 0x8, 0x1, 0x5, 0x3, 0x2239, 0x9, 0xdbc, 0x3, 0x0, 0x5, 0x800, 0x0, 0x9b3, 0x1ff, 0x7bc4, 0x204, 0x3000000, 0x5, 0x400, 0x6, 0x7fff, 0x9000, 0x4, 0x6, 0x4, 0x8, 0x81, 0x7, 0xc, 0x3ff, 0x7, 0x3, 0x3ff, 0x0, 0x3, 0x80, 0x5, 0x1000, 0x1000, 0x0, 0x6, 0x80, 0x8000, 0x4, 0x68, 0x5, 0x4, 0x6, 0x10, 0x2, 0x892, 0x80, 0x10000, 0x80, 0x25, 0x4, 0xfc9, 0x8, 0x2, 0x1, 0x8, 0xa, 0x96, 0xca9, 0xfffffffe, 0x0, 0x0, 0x3c2541b0, 0x5, 0x8, 0x19, 0x4, 0x8, 0x7c, 0x3f, 0x5, 0x2, 0x4, 0xd, 0x1, 0xd8f, 0xb, 0xd, 0x5, 0x9, 0x7, 0x4, 0x1, 0x1, 0x6, 0x9, 0x1, 0x9, 0x1, 0x407, 0xffff14d3, 0xc8e7, 0x66e, 0x0, 0x4, 0x2, 0x8, 0x9, 0x49da, 0x200, 0x9, 0x8, 0x4, 0x3, 0x9, 0x9, 0x7, 0x1, 0xfd, 0x6, 0xdb40, 0xda, 0x99, 0x12, 0xffffff01, 0xb98b, 0x1, 0xef78, 0x6, 0x7, 0x2, 0xffff, 0x1, 0x9, 0xcf, 0x408, 0xda2, 0x1, 0x85f, 0x1ff, 0x3ff, 0x8, 0x4, 0xf]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) 3.803884099s ago: executing program 3 (id=14045): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa00e1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x0, 0x0}) socket(0x10, 0x3, 0x0) personality(0x87bf5ac905ea0f7f) keyctl$restrict_keyring(0xa, 0xfffffffffffffffc, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@remote, 0x0, 0x400, 0x2000, 0x0, 0x2, 0x20, 0x10, 0x84}, {}, {0x0, 0x4000000000000}, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x4, 0x521, &(0x7f0000000640)="$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") sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x300}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0}, 0x28) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) 3.714451092s ago: executing program 2 (id=14046): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r2, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000000040)=""/114, 0x72}], 0x2}}, {{&(0x7f0000000180)=@xdp, 0x0, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/70}, {&(0x7f0000000540)=""/17}, {&(0x7f0000000680)=""/251}, {&(0x7f0000000780)=""/193}, {&(0x7f0000000880)=""/208}], 0x0, &(0x7f0000000a00)=""/67}, 0x6}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000a80)=""/124}, {&(0x7f0000001b80)=""/192}, {&(0x7f0000001c40)=""/79}, {&(0x7f0000001cc0)=""/61}]}, 0x7}, {{&(0x7f0000001d40)=@alg, 0x0, &(0x7f0000002380)=[{&(0x7f0000001dc0)=""/108}, {&(0x7f0000001e80)=""/138}, {&(0x7f0000001f40)=""/252}, {&(0x7f0000002040)=""/65}, {&(0x7f00000020c0)=""/4}, {&(0x7f0000002100)}, {&(0x7f0000002140)=""/242}, {&(0x7f0000002240)=""/56}, {&(0x7f0000002280)=""/228}], 0x0, &(0x7f0000002440)=""/138}, 0x1}], 0x4000011, 0x700, 0x0) sendfile(r3, r2, 0x0, 0x578410eb) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 3.659817663s ago: executing program 7 (id=14049): r0 = open(&(0x7f0000000180)='.\x00', 0x82000, 0x0) flock(r0, 0x2) r1 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r1, 0x1) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r3, 0x2) timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 3.602223134s ago: executing program 3 (id=14050): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000009f40)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x7, @remote, 0x6}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000040)="b1", 0x1}], 0x1}}], 0x1, 0x4000054) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x12, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1}]}}]}, 0x38}}, 0x0) 3.340210421s ago: executing program 8 (id=14051): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0xa4000061) openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newtfilter={0x48c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r3, {0x6}, {}, {0x8, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @filter_kind_options=@f_bpf={{0x8}, {0x458, 0x2, [@TCA_BPF_POLICE={0x44c, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0xfff, 0x81, 0x0, 0xb5a0, 0x3, 0x3b30, 0x4, 0x0, 0x401, 0x3cd9, 0x3, 0x7, 0x2c, 0x1, 0x7, 0x800, 0x3ff, 0x8, 0x1, 0x7, 0x8a30, 0x4, 0x3, 0x6, 0x0, 0x2, 0xfffffffd, 0x8, 0x3ff, 0x3, 0x3, 0xef4d, 0x2e0594bb, 0x7, 0x7fff, 0x400, 0x1725, 0x0, 0x5, 0x100, 0xfe26, 0xc748, 0x3, 0x4, 0xa, 0xda4, 0x1, 0x1, 0x2, 0x800, 0x0, 0xc7, 0x6, 0x4ee, 0x0, 0x4, 0x1, 0xf, 0x7, 0x6, 0x1000000, 0x4, 0x7, 0x401, 0x3, 0x4, 0x6, 0x4, 0x7f, 0x0, 0x0, 0x2, 0x5, 0x5, 0x3, 0x401, 0xd17a, 0x7, 0x0, 0xd6, 0x3, 0x800, 0x40, 0x669, 0x9, 0x0, 0x2c06, 0x3, 0x3, 0x4, 0x0, 0x7, 0x0, 0x0, 0x5, 0x0, 0x5fac1451, 0x0, 0x9, 0x2, 0x5, 0x2, 0x5, 0x40, 0x1, 0x594, 0x7f, 0x4, 0x80000001, 0x7, 0x1ff, 0x1, 0x5, 0x4c13157c, 0x7fffffff, 0x5, 0x8, 0x6, 0xa, 0x6, 0x977e, 0x5, 0x4, 0x0, 0x9, 0x1ff, 0x6, 0x43e8, 0xf487, 0x1, 0x6a5, 0x35f1, 0xc, 0x8, 0x81, 0x6, 0x8a, 0x8, 0x9, 0x9, 0x0, 0x7, 0x8, 0xc29a, 0x7fff, 0x5b9a, 0x3, 0x2, 0x7, 0x3ff, 0x6, 0x80000001, 0xc, 0x1, 0xb9, 0x8, 0x1000, 0x5ec, 0x0, 0x80000001, 0x4, 0x3, 0x7ca, 0x6, 0x10001, 0x0, 0x101, 0x40, 0x9, 0xd260, 0xc75, 0xc, 0x10, 0x1, 0x7fff, 0x7535, 0x62, 0xe, 0x3ff, 0x3, 0x9, 0x9, 0x2, 0x3, 0x9, 0x63e, 0xff, 0x5, 0xffffff7f, 0x1, 0x2, 0x101, 0xfff, 0xfff, 0x5, 0x0, 0x8, 0x8499, 0x8000, 0x1, 0xd63, 0x8, 0x2, 0x80000000, 0x3ff, 0x1, 0xe, 0x2, 0x1, 0x6, 0x1000, 0xffff, 0x40, 0x2, 0x7, 0x6, 0xffffffd4, 0x2, 0x2, 0x100, 0x4, 0x6, 0x4, 0xef48, 0x8000, 0x0, 0x1, 0x6e, 0x9, 0xffffffff, 0x1, 0x7, 0x8, 0x0, 0x3, 0x3, 0x9, 0x0, 0x7, 0xde7, 0x384759cf, 0x1, 0x6, 0xff, 0xbcac, 0x3, 0x7f, 0xffffff7f, 0x7, 0x5, 0x2, 0x4, 0x6aed, 0x7, 0x0, 0xfff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x30000007, 0x1800000, 0x2, 0x1, {0x5, 0x2, 0x7944, 0x8, 0xb, 0x3}, {0x7, 0x1, 0x9d7e, 0x3, 0x2, 0x8}, 0x5a, 0x9, 0x3}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}]}, @TCA_BPF_FD={0x8, 0x6, r1}]}}]}, 0x48c}}, 0x2000c800) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.339669921s ago: executing program 5 (id=14061): close(0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x492492492492775, 0x0) io_setup(0x400e, &(0x7f0000000600)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1) syz_clone3(&(0x7f0000000080)={0xa1800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}]) 3.193252945s ago: executing program 8 (id=14052): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x10) r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r1 = shmget(0x1, 0x2000, 0x4, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_STAT(r1, 0xd, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) socket$netlink(0x10, 0x3, 0x10) 3.177875316s ago: executing program 5 (id=14053): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa00e1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x2}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x10, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c}, 0x6d) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x4, @empty, 0x3}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000380)=ANY=[], 0x190) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r2 = syz_open_dev$vcsa(0x0, 0x7fffffffffffffff, 0xbf97ad7e4ada2d6f) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, 0x0, 0x8080) 3.148740736s ago: executing program 8 (id=14054): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000001800)=ANY=[], 0xfb, 0x1236, &(0x7f0000000600)="$eJzs28Frm2UcB/Bfm3bdOttUndMNxAe9TJCw9uBFDxbpQBZRtlXYBOGdTTX0NSl9QyEiVk9e/UMEEbyIIN70YC/+B4q3XjxOEF9polsjiVt0NCKfzyUPeX7f5PfwJIE3PO/B8x+/s7VZ1DazTkxPTcX0dkS6lSLFdPzpg3j6uW++ffzq9RuXV+v1tSspXVq9tvxsSmnxia9ef++TJ7/unH7t88Uv52J/6Y2Dn1d+2j+7f+7gt2tvN4vULFKr3UlZutlud7KbeSNtNIutWkqv5o2saKRmq2jsDMxv5u3t7W7KWhsL89s7jaJIWaubthrd1Gmnzk43ZW9lzVaq1WppYT44avqeqmZuj16OW2VZRpTlbJyIsizLUzEfp+OBWIjFqMZSPBgPxcNxJh6Js/FoPBaf/fBp9zABAAAAAAAAAAAAAAAAAAAA3D/j3v9/rlc16a4BAAAAAAAAAAAAAAAAAADg/+Xq9RuXV+v1tSspnYzIP9pd313vP/bnVzejGXk04mJU49fo3f3f1x9feqm+djH1LMWH+d4f+b3d9cpgfjmq8czw/HI/nwbzczF/NL8S1TgzLD8bK0PzJ7+48NSRfO2Fanz/ZrQjj404zN55//eXU3rxlfpf8ud7daNVjmN7AAAA4L6opduGXr/XaqPm+/kx/h8YuL4+zJ6fmejSiYii++5WlueNHYOhgwv/jTZ6gxN3q6nEvb/gbESM18YvZVn+m1V892P/I/eP4jMx2S0Y/U2Zi4i7xCsjm5+KiONdzqkYeKbcG1U86V8mjsOdTZ90JwAAAAAAAAAAAIxj5FHBub87RVgZ68jhpNcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8zg4cCwAAAAAI87dOo2MDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICvAgAA//8AfMuR") timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x1a, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x3736, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mknodat$loop(r1, &(0x7f0000000080)='./file0\x00', 0x40, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) 3.083937898s ago: executing program 5 (id=14055): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) set_mempolicy(0x4003, &(0x7f0000000040)=0xfffffffffffffffd, 0x4) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) unshare(0x22020600) sendmsg$nl_route_sched(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 2.224364571s ago: executing program 8 (id=14056): set_mempolicy(0x3, 0x0, 0x5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) symlink(0x0, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x2) fchdir(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x11, r2, 0x2000) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x3f) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 2.223947641s ago: executing program 3 (id=14057): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000480)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000000240)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x0, 0x108000, @loopback}, 0x1c) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00051400000000000000000000000800120000000200c06b6e000000000006000000000000000000000000000000e00000020000000000000000000000000000000000000000000000000000000105000500008000000a0000000000000000000000000000000000000000000001000000000000000005000600ff4700000a"], 0xa0}}, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x2000c000, 0x0, 0x0) 2.152623343s ago: executing program 3 (id=14058): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x702, 0xe, 0x0, &(0x7f0000000540)="e460334470b832e3c0d333c1b939", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 2.065222005s ago: executing program 8 (id=14059): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000380)=0x10, 0x1c) io_setup(0xf, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1, &(0x7f0000001000)=[&(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x7fff, r1, &(0x7f0000000cc0)="e320", 0x2, 0x0, 0x0, 0x2}]) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f00000000c0)={0x10, 0x0, "beb45ad771fc83383a8d7fc280fb64bd"}) r3 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x200440d1}, 0x800e885) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) 624.022063ms ago: executing program 7 (id=14060): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@allocspi={0x148, 0x16, 0x401, 0xfffffffe, 0x0, {{{@in6=@private0, @in=@dev={0xac, 0x14, 0x14, 0x1a}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x20000000, 0x33}, @in=@remote, {0x3, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x0, 0x3}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xd0}, 0x8, 0xffffffff}, [@migrate={0x50, 0x1b, [{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0x3e}, 0x33, 0x2, 0x0, 0x3500, 0x2, 0xa}]}]}, 0x148}}, 0x20004808) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0x232, 0x6, 0x90, [0x0, 0x200000000440, 0x0, 0x0, 0x200000000470, 0x200000000684], 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB]}, 0x78) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) 623.391523ms ago: executing program 5 (id=14071): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, 0x0, 0x40) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4db, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x8000, 0x8}, 0x1048a, 0x4000, 0x8010ffe, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) mount(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r0 = io_uring_setup(0x1cf8, &(0x7f0000000040)={0x0, 0xc8a3, 0xc000, 0x2000008, 0xc1}) pselect6(0x40, &(0x7f0000000380)={0xff, 0x0, 0x0, 0x8000000000008, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000000)={0x2100000001f, 0x0, 0x0, 0x3, 0x0, 0x401}, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 622.975453ms ago: executing program 3 (id=14062): socket$inet6_udp(0xa, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x2}, 0xa4b4, 0x10003, 0xfffffff8, 0x2, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x5}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040005}, 0x8800) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x8926, 0x16, 0x0, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 622.861233ms ago: executing program 8 (id=14063): mremap(&(0x7f0000780000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f00004fe000/0x3000)=nil) fsmount(0xffffffffffffffff, 0x1, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4000041) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x4080000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x80}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', 0x0, 0x0) 612.211024ms ago: executing program 2 (id=14064): prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x403000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e"], 0x50) 527.393566ms ago: executing program 3 (id=14065): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x2, 0x6) write$cgroup_pid(r2, &(0x7f0000000000), 0xffffff98) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) 491.674406ms ago: executing program 7 (id=14066): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40800) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0xa6ff, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000140001032dbd7000fcdbdf250b"], 0x1c}}, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000001240)='./file2\x00', 0x2000080, &(0x7f00000003c0)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYBLOB="9a6c01d97557fe6fa6988edac9d750c94e48f976693942dbd85f5342631026fe6514a89d2be1c8a436a3d448a663e5cb279167517537bcca85df16b7ad217b1352e9d15a66f775a6414e474da9cfa1691c9f79e9c64646bed6b343173ebb53187320bfa4e3958b65bb0bafc5add4"], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r1 = creat(0x0, 0x165) mknod$loop(0x0, 0x400, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x10, 0x0, 0x0) chmod(&(0x7f0000000040)='./file0\x00', 0x169) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000080)='vfat\x00') 218.865284ms ago: executing program 7 (id=14067): socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2A7:n\x8c\xa7P\x1a\x87\xd9c\xecR\xd6\xe8\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x19M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xff\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\bB\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fl\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \x90\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2o\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xff\x0f\x00\x00\x00\x00\x00\x00Li\r\x95Z\x89\"_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b)\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca\x00\x00\x00\x00\x00\x03\xfcWZ!<\x16a5ZL.\xe6\x15]\xebY\xaa\xbea\x8e\xdc\xc52r\"\xea\x9e\x03\x11&\xc3JU\xa7\xd6\x8a\xf8\xae>S\xde', 0x0) write(r0, &(0x7f0000000140)='/', 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xfec) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) open(0x0, 0x80, 0x122) utimensat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) 91.017908ms ago: executing program 5 (id=14068): unshare(0x24020400) timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x8001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x115) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) pidfd_getfd(r2, r2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 0s ago: executing program 5 (id=14069): socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x14cf, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) kernel console output (not intermixed with test programs): 0. [ 761.699744][T10371] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 761.845306][ T28] audit: type=1400 audit(1018.810:29438): avc: denied { write } for pid=10370 comm="syz.5.12851" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 762.654991][ T5955] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 762.698314][T10396] loop5: detected capacity change from 0 to 512 [ 762.726462][T10396] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 762.772717][ T28] audit: type=1400 audit(1019.740:29439): avc: denied { write } for pid=10395 comm="syz.5.12859" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 762.798638][T10396] Quota error (device loop5): do_check_range: Getting block 134217728 out of range 0-5 [ 762.812654][T10401] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12860'. [ 762.867334][ T5955] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 763.093254][T10418] lo: Caught tx_queue_len zero misconfig [ 763.099523][T10418] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 763.111878][T10410] netlink: 44 bytes leftover after parsing attributes in process `syz.3.12864'. [ 765.986219][T10471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12885'. [ 766.591644][T10482] xfrm0 speed is unknown, defaulting to 1000 [ 766.603976][T10498] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12892'. [ 766.681547][T10498] bond14: entered promiscuous mode [ 766.728656][T10498] 8021q: adding VLAN 0 to HW filter on device bond14 [ 766.906620][T10482] lo speed is unknown, defaulting to 1000 [ 767.675433][T10525] loop5: detected capacity change from 0 to 8192 [ 767.720784][T10482] wg1 speed is unknown, defaulting to 1000 [ 767.734063][T10525] loop5: p1 p2 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 [ 767.734543][T10525] loop5: p1 start 67109111 is beyond EOD, [ 767.857740][T10531] netlink: 'syz.2.12904': attribute type 27 has an invalid length. [ 767.894048][T10525] truncated [ 767.902113][T10525] loop5: p3 start 100859904 is beyond EOD, truncated [ 767.912904][T10525] loop5: p5 start 67109111 is beyond EOD, truncated [ 767.923079][T10525] loop5: p7 start 67109111 is beyond EOD, truncated [ 767.931495][T10525] loop5: p9 start 67109111 is beyond EOD, truncated [ 767.940364][T10525] loop5: p11 start 67109111 is beyond EOD, truncated [ 767.950834][T10525] loop5: p13 start 67109111 is beyond EOD, truncated [ 767.959618][T10525] loop5: p15 start 67109111 is beyond EOD, truncated [ 767.968041][T10525] loop5: p17 start 67109111 is beyond EOD, truncated [ 767.978266][T10525] loop5: p19 start 67109111 is beyond EOD, truncated [ 767.986709][T10525] loop5: p21 start 67109111 is beyond EOD, truncated [ 767.995628][T10525] loop5: p23 start 67109111 is beyond EOD, truncated [ 768.003836][T10525] loop5: p25 start 67109111 is beyond EOD, truncated [ 768.014052][T10525] loop5: p27 start 67109111 is beyond EOD, truncated [ 768.022400][T10525] loop5: p29 start 67109111 is beyond EOD, truncated [ 768.030833][T10525] loop5: p31 start 67109111 is beyond EOD, truncated [ 768.040371][T10525] loop5: p33 start 67109111 is beyond EOD, truncated [ 768.074039][T10525] loop5: p35 start 67109111 is beyond EOD, truncated [ 768.110651][T10525] loop5: p37 start 67109111 is beyond EOD, truncated [ 768.128978][T10541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=10541 comm=syz.7.12906 [ 768.160783][T10525] loop5: p39 start 67109111 is beyond EOD, truncated [ 768.178266][T10525] loop5: p41 start 67109111 is beyond EOD, truncated [ 768.194179][T10525] loop5: p43 start 67109111 is beyond EOD, truncated [ 768.210177][T10525] loop5: p45 start 67109111 is beyond EOD, truncated [ 768.226288][T10525] loop5: p47 start 67109111 is beyond EOD, truncated [ 768.248495][T10525] loop5: p49 start 67109111 is beyond EOD, truncated [ 768.262652][T10525] loop5: p51 start 67109111 is beyond EOD, truncated [ 768.271944][T10525] loop5: p53 start 67109111 is beyond EOD, truncated [ 768.287997][T10525] loop5: p55 start 67109111 is beyond EOD, truncated [ 768.289031][T10531] ipvlan2: left allmulticast mode [ 768.307426][T10525] loop5: p57 start 67109111 is beyond EOD, truncated [ 768.311036][T10531] bond8: left allmulticast mode [ 768.324199][T10525] loop5: p59 start 67109111 is beyond EOD, truncated [ 768.339959][T10525] loop5: p61 start 67109111 is beyond EOD, truncated [ 768.361541][T10531] bond9: left allmulticast mode [ 768.373433][T10525] loop5: p63 start 67109111 is beyond EOD, truncated [ 768.375603][T10531] bridge0: left promiscuous mode [ 768.385728][T10525] loop5: p65 start 67109111 is beyond EOD, truncated [ 768.387167][T10531] bridge0: left allmulticast mode [ 768.407167][T10525] loop5: p67 start 67109111 is beyond EOD, truncated [ 768.416679][T10525] loop5: p69 start 67109111 is beyond EOD, truncated [ 768.425943][T10525] loop5: p71 start 67109111 is beyond EOD, truncated [ 768.433673][T10525] loop5: p73 start 67109111 is beyond EOD, truncated [ 768.441364][T10531] veth7: left promiscuous mode [ 768.442366][T10525] loop5: p75 start 67109111 is beyond EOD, truncated [ 768.454198][T10525] loop5: p77 start 67109111 is beyond EOD, truncated [ 768.462384][T10525] loop5: p79 start 67109111 is beyond EOD, truncated [ 768.471844][T10525] loop5: p81 start 67109111 is beyond EOD, truncated [ 768.479776][T10525] loop5: p83 start 67109111 is beyond EOD, truncated [ 768.487618][T10525] loop5: p85 start 67109111 is beyond EOD, truncated [ 768.509785][ T3613] lo speed is unknown, defaulting to 1000 [ 768.516512][ T3613] lyz2: Port: 1 Link DOWN [ 768.531580][T10525] loop5: p87 start 67109111 is beyond EOD, truncated [ 768.545140][T10525] loop5: p89 start 67109111 is beyond EOD, truncated [ 768.553210][T10536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 768.562436][T10525] loop5: p91 start 67109111 is beyond EOD, truncated [ 768.570100][T10525] loop5: p93 start 67109111 is beyond EOD, truncated [ 768.578436][T10525] loop5: p95 start 67109111 is beyond EOD, truncated [ 768.586185][T10525] loop5: p97 start 67109111 is beyond EOD, truncated [ 768.594629][T10525] loop5: p99 start 67109111 is beyond EOD, truncated [ 768.602813][T10525] loop5: p101 start 67109111 is beyond EOD, truncated [ 768.603390][T10536] 8021q: adding VLAN 0 to HW filter on device team0 [ 768.617542][T10525] loop5: p103 start 67109111 is beyond EOD, truncated [ 768.629660][T10525] loop5: p105 start 67109111 is beyond EOD, truncated [ 768.639670][T10525] loop5: p107 start 67109111 is beyond EOD, truncated [ 768.669590][T10525] loop5: p109 start 67109111 is beyond EOD, truncated [ 768.689545][T10525] loop5: p111 start 67109111 is beyond EOD, truncated [ 768.698305][T10525] loop5: p113 start 67109111 is beyond EOD, truncated [ 768.706767][T10525] loop5: p115 start 67109111 is beyond EOD, truncated [ 768.715298][T10525] loop5: p117 start 67109111 is beyond EOD, truncated [ 768.722953][T10525] loop5: p119 start 67109111 is beyond EOD, truncated [ 768.731925][T10525] loop5: p121 start 67109111 is beyond EOD, truncated [ 768.740584][T10525] loop5: p123 start 67109111 is beyond EOD, truncated [ 768.749488][T10525] loop5: p125 start 67109111 is beyond EOD, truncated [ 768.749468][T10536] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 768.768200][T10525] loop5: p127 start 67109111 is beyond EOD, truncated [ 768.786305][T10525] loop5: p129 start 67109111 is beyond EOD, truncated [ 768.794745][T10536] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 768.805743][T10525] loop5: p131 start 67109111 is beyond EOD, truncated [ 768.824682][T10525] loop5: p133 start 67109111 is beyond EOD, truncated [ 768.846257][T10536] veth1_vlan: left promiscuous mode [ 768.852774][T10525] loop5: p135 start 67109111 is beyond EOD, truncated [ 768.861432][T10536] veth0_vlan: left promiscuous mode [ 768.872130][T10525] loop5: p137 start 67109111 is beyond EOD, truncated [ 768.888931][T10536] veth0_vlan: entered promiscuous mode [ 768.895042][T10525] loop5: p139 start 67109111 is beyond EOD, truncated [ 768.906323][T10536] veth1_vlan: entered promiscuous mode [ 768.912675][T10525] loop5: p141 start 67109111 is beyond EOD, truncated [ 768.921489][T10536] geneve1: left promiscuous mode [ 768.929795][T10525] loop5: p143 start 67109111 is beyond EOD, truncated [ 768.939750][T10536] 8021q: adding VLAN 0 to HW filter on device bond1 [ 768.947910][T10525] loop5: p145 start 67109111 is beyond EOD, truncated [ 768.956790][T10536] 8021q: adding VLAN 0 to HW filter on device team1 [ 768.963975][T10525] loop5: p147 start 67109111 is beyond EOD, truncated [ 768.970424][T10536] 8021q: adding VLAN 0 to HW filter on device bond2 [ 768.977867][T10525] loop5: p149 start 67109111 is beyond EOD, truncated [ 768.986650][T10553] netlink: 20 bytes leftover after parsing attributes in process `syz.8.12911'. [ 768.998382][T10525] loop5: p151 start 67109111 is beyond EOD, truncated [ 769.001128][T10536] 8021q: adding VLAN 0 to HW filter on device bond3 [ 769.012375][T10525] loop5: p153 start 67109111 is beyond EOD, truncated [ 769.020139][T10525] loop5: p155 start 67109111 is beyond EOD, truncated [ 769.027819][T10525] loop5: p157 start 67109111 is beyond EOD, truncated [ 769.035643][T10525] loop5: p159 start 67109111 is beyond EOD, truncated [ 769.043261][T10536] geneve1: entered promiscuous mode [ 769.056541][T10536] 8021q: adding VLAN 0 to HW filter on device bond4 [ 769.063491][T10525] loop5: p161 start 67109111 is beyond EOD, truncated [ 769.076314][T10536] 8021q: adding VLAN 0 to HW filter on device bond5 [ 769.084705][T10525] loop5: p163 start 67109111 is beyond EOD, truncated [ 769.091833][T10555] loop8: detected capacity change from 0 to 512 [ 769.099530][T10525] loop5: p165 start 67109111 is beyond EOD, truncated [ 769.111379][T10525] loop5: p167 start 67109111 is beyond EOD, truncated [ 769.119266][T10555] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 769.128969][T10536] 8021q: adding VLAN 0 to HW filter on device bond6 [ 769.129726][T10525] loop5: p169 start 67109111 is beyond EOD, truncated [ 769.151127][T10536] 8021q: adding VLAN 0 to HW filter on device bond7 [ 769.155078][T10557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12913'. [ 769.167113][T10536] 8021q: adding VLAN 0 to HW filter on device bond8 [ 769.170799][T10555] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 769.179796][T10536] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 769.190388][T10525] loop5: p171 start 67109111 is beyond EOD, truncated [ 769.202274][T10536] 8021q: adding VLAN 0 to HW filter on device bond9 [ 769.211717][T10525] loop5: p173 start 67109111 is beyond EOD, truncated [ 769.213798][T10536] 8021q: adding VLAN 0 to HW filter on device bond10 [ 769.227390][T10525] loop5: p175 start 67109111 is beyond EOD, truncated [ 769.237926][T10525] loop5: p177 start 67109111 is beyond EOD, truncated [ 769.241665][ T3613] lo speed is unknown, defaulting to 1000 [ 769.246210][T10525] loop5: p179 start 67109111 is beyond EOD, truncated [ 769.272592][T10525] loop5: p181 start 67109111 is beyond EOD, truncated [ 769.277208][ T3613] lyz2: Port: 1 Link ACTIVE [ 769.290145][T10525] loop5: p183 start 67109111 is beyond EOD, truncated [ 769.303867][T10525] loop5: p185 start 67109111 is beyond EOD, truncated [ 769.322029][T10525] loop5: p187 start 67109111 is beyond EOD, truncated [ 769.338319][T16331] lo speed is unknown, defaulting to 1000 [ 769.350420][T10525] loop5: p189 start 67109111 is beyond EOD, truncated [ 769.358412][ T496] ip6_tunnel:  xmit: Local address not yet configured! [ 769.366380][ T496] ip6_tunnel:  xmit: Local address not yet configured! [ 769.366836][ T8449] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 769.384504][ T30] bond10: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 769.387952][T10525] loop5: p191 start 67109111 is beyond EOD, [ 769.397967][T16331] ip6_tunnel:  xmit: Local address not yet configured! [ 769.399093][T10525] truncated [ 769.414221][ T30] bond10: (slave veth7): making interface the new active one [ 769.429707][T10525] loop5: p193 start 67109111 is beyond EOD, truncated [ 769.447594][ T30] bond10: active interface up! [ 769.477023][T10525] loop5: p195 start 67109111 is beyond EOD, truncated [ 769.494435][T10562] xfrm0 speed is unknown, defaulting to 1000 [ 769.508235][T10525] loop5: p197 start 67109111 is beyond EOD, truncated [ 769.534101][T10525] loop5: p199 start 67109111 is beyond EOD, truncated [ 769.560271][T10525] loop5: p201 start 67109111 is beyond EOD, truncated [ 769.575082][T10525] loop5: p203 start 67109111 is beyond EOD, truncated [ 769.583951][T10562] lo speed is unknown, defaulting to 1000 [ 769.591819][T10525] loop5: p205 start 67109111 is beyond EOD, truncated [ 769.606291][T10525] loop5: p207 start 67109111 is beyond EOD, truncated [ 769.625123][T10525] loop5: p209 start 67109111 is beyond EOD, truncated [ 769.636450][T10525] loop5: p211 start 67109111 is beyond EOD, truncated [ 769.651152][T10525] loop5: p213 start 67109111 is beyond EOD, truncated [ 769.669481][T10525] loop5: p215 start 67109111 is beyond EOD, truncated [ 769.681768][T10525] loop5: p217 start 67109111 is beyond EOD, truncated [ 769.693499][T10569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 769.703860][T10525] loop5: p219 start 67109111 is beyond EOD, truncated [ 769.710058][T10569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 769.722416][T10525] loop5: p221 start 67109111 is beyond EOD, truncated [ 769.739336][T10525] loop5: p223 start 67109111 is beyond EOD, truncated [ 769.740296][T10562] wg1 speed is unknown, defaulting to 1000 [ 769.758433][T10525] loop5: p225 start 67109111 is beyond EOD, truncated [ 769.778231][T10525] loop5: p227 start 67109111 is beyond EOD, truncated [ 769.799421][T10525] loop5: p229 start 67109111 is beyond EOD, truncated [ 769.815207][T10525] loop5: p231 start 67109111 is beyond EOD, truncated [ 769.831547][T10525] loop5: p233 start 67109111 is beyond EOD, truncated [ 769.846679][T10525] loop5: p235 start 67109111 is beyond EOD, truncated [ 769.861141][T10525] loop5: p237 start 67109111 is beyond EOD, truncated [ 769.876864][T10525] loop5: p239 start 67109111 is beyond EOD, truncated [ 769.892307][T10525] loop5: p241 start 67109111 is beyond EOD, truncated [ 769.912370][T10525] loop5: p243 start 67109111 is beyond EOD, truncated [ 769.928507][T10525] loop5: p245 start 67109111 is beyond EOD, truncated [ 769.938845][T10525] loop5: p247 start 67109111 is beyond EOD, truncated [ 769.954044][T10525] loop5: p249 start 67109111 is beyond EOD, truncated [ 769.964958][T16331] ip6_tunnel:  xmit: Local address not yet configured! [ 769.972650][T10525] loop5: p251 start 67109111 is beyond EOD, truncated [ 769.981413][T10525] loop5: p253 start 67109111 is beyond EOD, truncated [ 770.000751][T10525] loop5: p255 start 67109111 is beyond EOD, truncated [ 770.292922][ T8735] udevd[8735]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 770.368441][T10580] udevd[10580]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory [ 770.382892][T10581] udevd[10581]: inotify_add_watch(7, /dev/loop5p8, 10) failed: No such file or directory [ 770.408157][T10582] udevd[10582]: inotify_add_watch(7, /dev/loop5p10, 10) failed: No such file or directory [ 770.427059][ T8580] udevd[8580]: inotify_add_watch(7, /dev/loop5p26, 10) failed: No such file or directory [ 770.439050][T10583] udevd[10583]: inotify_add_watch(7, /dev/loop5p12, 10) failed: No such file or directory [ 770.457399][ T8735] udevd[8735]: inotify_add_watch(7, /dev/loop5p28, 10) failed: No such file or directory [ 770.460324][T10584] udevd[10584]: inotify_add_watch(7, /dev/loop5p14, 10) failed: No such file or directory [ 770.482339][T10586] udevd[10586]: inotify_add_watch(7, /dev/loop5p18, 10) failed: No such file or directory [ 770.490530][T10585] udevd[10585]: inotify_add_watch(7, /dev/loop5p16, 10) failed: No such file or directory [ 770.495168][T16331] ip6_tunnel:  xmit: Local address not yet configured! [ 770.528293][T10579] loop8: detected capacity change from 0 to 2048 [ 770.834724][T10603] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12924'. [ 771.108953][T10562] Set syz1 is full, maxelem 65536 reached [ 771.219905][T10621] syzkaller0: entered promiscuous mode [ 771.225839][T10621] syzkaller0: entered allmulticast mode [ 771.606815][T10640] team0 (unregistering): Port device team_slave_0 removed [ 771.615291][T10640] team0 (unregistering): Port device team_slave_1 removed [ 773.056639][T10688] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12954'. [ 773.100796][T10688] bond4: entered promiscuous mode [ 773.121125][T10688] 8021q: adding VLAN 0 to HW filter on device bond4 [ 773.824403][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 773.839084][T10696] loop8: detected capacity change from 0 to 512 [ 773.919174][ T28] audit: type=1400 audit(1030.890:29440): avc: denied { create } for pid=10704 comm="syz.5.12960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 773.970408][T10707] IPVS: sh: FWM 3 0x00000003 - no destination available [ 773.981306][T10707] IPVS: sh: FWM 3 0x00000003 - no destination available [ 774.098053][T10714] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12964'. [ 774.148755][T10708] loop8: detected capacity change from 0 to 8192 [ 774.217203][T10708] loop8: p1 p2 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 [ 774.218715][T10708] loop8: p1 start 67109111 is beyond EOD, truncated [ 774.352578][T10708] loop8: p3 start 100859904 is beyond EOD, truncated [ 774.361345][T10708] loop8: p5 start 67109111 is beyond EOD, truncated [ 774.377382][T10708] loop8: p7 start 67109111 is beyond EOD, truncated [ 774.381072][T10726] netlink: 48 bytes leftover after parsing attributes in process `syz.7.12970'. [ 774.394000][T10708] loop8: p9 start 67109111 is beyond EOD, truncated [ 774.412919][T10708] loop8: p11 start 67109111 is beyond EOD, truncated [ 774.422383][T10708] loop8: p13 start 67109111 is beyond EOD, truncated [ 774.431011][T10708] loop8: p15 start 67109111 is beyond EOD, truncated [ 774.439584][T10708] loop8: p17 start 67109111 is beyond EOD, truncated [ 774.448147][T10708] loop8: p19 start 67109111 is beyond EOD, truncated [ 774.457042][T10708] loop8: p21 start 67109111 is beyond EOD, truncated [ 774.465251][T10708] loop8: p23 start 67109111 is beyond EOD, truncated [ 774.473664][T10708] loop8: p25 start 67109111 is beyond EOD, truncated [ 774.482390][T10708] loop8: p27 start 67109111 is beyond EOD, truncated [ 774.490877][T10708] loop8: p29 start 67109111 is beyond EOD, truncated [ 774.499352][T10708] loop8: p31 start 67109111 is beyond EOD, truncated [ 774.507854][T10708] loop8: p33 start 67109111 is beyond EOD, truncated [ 774.517054][T10708] loop8: p35 start 67109111 is beyond EOD, truncated [ 774.525469][T10708] loop8: p37 start 67109111 is beyond EOD, truncated [ 774.533474][T10708] loop8: p39 start 67109111 is beyond EOD, truncated [ 774.542055][T10708] loop8: p41 start 67109111 is beyond EOD, truncated [ 774.550884][T10708] loop8: p43 start 67109111 is beyond EOD, truncated [ 774.566140][T10708] loop8: p45 start 67109111 is beyond EOD, truncated [ 774.580423][T10708] loop8: p47 start 67109111 is beyond EOD, truncated [ 774.588547][T10708] loop8: p49 start 67109111 is beyond EOD, truncated [ 774.596980][T10708] loop8: p51 start 67109111 is beyond EOD, truncated [ 774.606575][T10708] loop8: p53 start 67109111 is beyond EOD, truncated [ 774.615361][T10708] loop8: p55 start 67109111 is beyond EOD, truncated [ 774.623280][T10708] loop8: p57 start 67109111 is beyond EOD, truncated [ 774.632173][T10708] loop8: p59 start 67109111 is beyond EOD, truncated [ 774.643294][T10708] loop8: p61 start 67109111 is beyond EOD, truncated [ 774.653112][T10708] loop8: p63 start 67109111 is beyond EOD, truncated [ 774.661061][T10708] loop8: p65 start 67109111 is beyond EOD, truncated [ 774.670539][T10708] loop8: p67 start 67109111 is beyond EOD, truncated [ 774.678803][T10708] loop8: p69 start 67109111 is beyond EOD, truncated [ 774.686819][ T28] audit: type=1326 audit(1031.660:29441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10719 comm="syz.5.12966" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ee0aecdd9 code=0x7ffc0000 [ 774.713023][T10708] loop8: p71 start 67109111 is beyond EOD, truncated [ 774.721420][T10708] loop8: p73 start 67109111 is beyond EOD, truncated [ 774.729808][T10708] loop8: p75 start 67109111 is beyond EOD, truncated [ 774.738106][ T28] audit: type=1326 audit(1031.660:29442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10719 comm="syz.5.12966" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ee0aecdd9 code=0x7ffc0000 [ 774.765430][T10708] loop8: p77 start 67109111 is beyond EOD, truncated [ 774.773092][ T28] audit: type=1326 audit(1031.660:29443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10719 comm="syz.5.12966" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ee0aecdd9 code=0x7ffc0000 [ 774.799275][T10708] loop8: p79 start 67109111 is beyond EOD, truncated [ 774.807112][ T28] audit: type=1326 audit(1031.660:29444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10719 comm="syz.5.12966" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ee0aecdd9 code=0x7ffc0000 [ 774.833308][T10708] loop8: p81 start 67109111 is beyond EOD, truncated [ 774.841103][ T28] audit: type=1326 audit(1031.660:29445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10719 comm="syz.5.12966" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8ee0aecdd9 code=0x7ffc0000 [ 774.841602][T10708] loop8: p83 start 67109111 is beyond EOD, [ 774.882964][ T28] audit: type=1326 audit(1031.660:29446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10719 comm="syz.5.12966" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ee0aecdd9 code=0x7ffc0000 [ 774.915904][T10708] truncated [ 774.919373][ T28] audit: type=1326 audit(1031.660:29447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10719 comm="syz.5.12966" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ee0aecdd9 code=0x7ffc0000 [ 774.945650][T10708] loop8: p85 start 67109111 is beyond EOD, truncated [ 774.953546][T10708] loop8: p87 start 67109111 is beyond EOD, truncated [ 774.971062][T10708] loop8: p89 start 67109111 is beyond EOD, truncated [ 774.995083][T10708] loop8: p91 start 67109111 is beyond EOD, truncated [ 775.015759][T10708] loop8: p93 start 67109111 is beyond EOD, truncated [ 775.026767][ T28] audit: type=1326 audit(1031.660:29448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10719 comm="syz.5.12966" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ee0aecdd9 code=0x7ffc0000 [ 775.055924][T10708] loop8: p95 start 67109111 is beyond EOD, truncated [ 775.063640][T10708] loop8: p97 start 67109111 is beyond EOD, truncated [ 775.071373][T10708] loop8: p99 start 67109111 is beyond EOD, truncated [ 775.081924][T10708] loop8: p101 start 67109111 is beyond EOD, truncated [ 775.110439][ T28] audit: type=1326 audit(1031.660:29449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10719 comm="syz.5.12966" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ee0aecdd9 code=0x7ffc0000 [ 775.120249][T10708] loop8: p103 start 67109111 is beyond EOD, [ 775.139726][T10737] netlink: 'syz.2.12974': attribute type 1 has an invalid length. [ 775.157899][T10708] truncated [ 775.162539][T10739] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12975'. [ 775.173144][T10737] 8021q: adding VLAN 0 to HW filter on device bond11 [ 775.218397][T10708] loop8: p105 start 67109111 is beyond EOD, truncated [ 775.268175][T10743] macvlan2: entered promiscuous mode [ 775.278007][T10708] loop8: p107 start 67109111 is beyond EOD, truncated [ 775.297703][T10739] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10739 comm=syz.3.12975 [ 775.318280][T10743] macvlan2: entered allmulticast mode [ 775.323920][T10708] loop8: p109 start 67109111 is beyond EOD, truncated [ 775.355156][T10743] bond11: entered promiscuous mode [ 775.362530][T10708] loop8: p111 start 67109111 is beyond EOD, truncated [ 775.378977][T10743] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 775.388250][T10708] loop8: p113 start 67109111 is beyond EOD, truncated [ 775.403326][T10743] bond11: left promiscuous mode [ 775.409922][T10708] loop8: p115 start 67109111 is beyond EOD, truncated [ 775.444000][T10708] loop8: p117 start 67109111 is beyond EOD, truncated [ 775.463418][T10708] loop8: p119 start 67109111 is beyond EOD, truncated [ 775.474972][T10708] loop8: p121 start 67109111 is beyond EOD, truncated [ 775.484638][T10708] loop8: p123 start 67109111 is beyond EOD, truncated [ 775.503592][T10708] loop8: p125 start 67109111 is beyond EOD, truncated [ 775.511356][T10708] loop8: p127 start 67109111 is beyond EOD, truncated [ 775.537522][T10708] loop8: p129 start 67109111 is beyond EOD, truncated [ 775.559577][T10708] loop8: p131 start 67109111 is beyond EOD, truncated [ 775.568708][T10708] loop8: p133 start 67109111 is beyond EOD, truncated [ 775.589986][T10708] loop8: p135 start 67109111 is beyond EOD, truncated [ 775.601376][T10708] loop8: p137 start 67109111 is beyond EOD, truncated [ 775.622067][T10708] loop8: p139 start 67109111 is beyond EOD, truncated [ 775.642900][T10708] loop8: p141 start 67109111 is beyond EOD, truncated [ 775.666240][T10708] loop8: p143 start 67109111 is beyond EOD, truncated [ 775.679926][T10708] loop8: p145 start 67109111 is beyond EOD, truncated [ 775.698095][T10708] loop8: p147 start 67109111 is beyond EOD, truncated [ 775.715136][T10708] loop8: p149 start 67109111 is beyond EOD, truncated [ 775.731726][T10708] loop8: p151 start 67109111 is beyond EOD, truncated [ 775.754613][T10708] loop8: p153 start 67109111 is beyond EOD, truncated [ 775.771347][T10708] loop8: p155 start 67109111 is beyond EOD, truncated [ 775.793501][T10708] loop8: p157 start 67109111 is beyond EOD, truncated [ 775.813361][T10708] loop8: p159 start 67109111 is beyond EOD, truncated [ 775.835250][T10708] loop8: p161 start 67109111 is beyond EOD, truncated [ 775.852261][T10708] loop8: p163 start 67109111 is beyond EOD, truncated [ 775.872268][T10708] loop8: p165 start 67109111 is beyond EOD, truncated [ 775.890447][T10708] loop8: p167 start 67109111 is beyond EOD, truncated [ 775.917356][T10708] loop8: p169 start 67109111 is beyond EOD, truncated [ 775.943968][T10708] loop8: p171 start 67109111 is beyond EOD, truncated [ 775.964219][T10708] loop8: p173 start 67109111 is beyond EOD, truncated [ 775.977786][T10708] loop8: p175 start 67109111 is beyond EOD, truncated [ 775.986599][T10762] tipc: Failed to remove unknown binding: 66,0,0/0:600143533/600143535 [ 775.995515][T10762] tipc: Failed to remove unknown binding: 66,0,0/0:600143533/600143534 [ 776.004004][T10708] loop8: p177 start 67109111 is beyond EOD, truncated [ 776.012508][T10708] loop8: p179 start 67109111 is beyond EOD, truncated [ 776.019560][T10762] tipc: Failed to remove unknown binding: 66,0,0/0:600143533/600143535 [ 776.028414][T10762] tipc: Failed to remove unknown binding: 66,0,0/0:600143533/600143534 [ 776.037915][T10708] loop8: p181 start 67109111 is beyond EOD, truncated [ 776.046304][T10708] loop8: p183 start 67109111 is beyond EOD, truncated [ 776.056235][T10708] loop8: p185 start 67109111 is beyond EOD, truncated [ 776.082447][T10708] loop8: p187 start 67109111 is beyond EOD, truncated [ 776.092118][T10708] loop8: p189 start 67109111 is beyond EOD, truncated [ 776.102125][T10708] loop8: p191 start 67109111 is beyond EOD, truncated [ 776.117535][T10708] loop8: p193 start 67109111 is beyond EOD, truncated [ 776.141782][T10708] loop8: p195 start 67109111 is beyond EOD, truncated [ 776.157038][T10708] loop8: p197 start 67109111 is beyond EOD, truncated [ 776.174960][T10708] loop8: p199 start 67109111 is beyond EOD, truncated [ 776.198841][T10708] loop8: p201 start 67109111 is beyond EOD, truncated [ 776.216477][T10708] loop8: p203 start 67109111 is beyond EOD, truncated [ 776.234148][T10708] loop8: p205 start 67109111 is beyond EOD, truncated [ 776.246017][T10708] loop8: p207 start 67109111 is beyond EOD, truncated [ 776.261123][T10708] loop8: p209 start 67109111 is beyond EOD, truncated [ 776.271524][T10770] netlink: 'syz.3.12986': attribute type 27 has an invalid length. [ 776.281072][T10708] loop8: p211 start 67109111 is beyond EOD, truncated [ 776.292888][T10770] sit1: left allmulticast mode [ 776.298681][T10770] vlan2: left allmulticast mode [ 776.303769][T10708] loop8: p213 start 67109111 is beyond EOD, truncated [ 776.312318][T10770] syz_tun: left allmulticast mode [ 776.318795][T10708] loop8: p215 start 67109111 is beyond EOD, truncated [ 776.326470][T10770] ip6gre1: left promiscuous mode [ 776.333061][T10770] ip6gre1: left allmulticast mode [ 776.339373][T10708] loop8: p217 start 67109111 is beyond EOD, truncated [ 776.349104][T10708] loop8: p219 start 67109111 is beyond EOD, truncated [ 776.365317][T10708] loop8: p221 start 67109111 is beyond EOD, truncated [ 776.381088][T10708] loop8: p223 start 67109111 is beyond EOD, truncated [ 776.395744][T10772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 776.405554][T10708] loop8: p225 start 67109111 is beyond EOD, truncated [ 776.413733][T10772] 8021q: adding VLAN 0 to HW filter on device team0 [ 776.423075][T10708] loop8: p227 start 67109111 is beyond EOD, truncated [ 776.457174][T10708] loop8: p229 start 67109111 is beyond EOD, truncated [ 776.466581][T10772] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 776.477958][T10708] loop8: p231 start 67109111 is beyond EOD, truncated [ 776.488138][T10772] veth1_vlan: left promiscuous mode [ 776.495620][T10708] loop8: p233 start 67109111 is beyond EOD, truncated [ 776.503431][T10772] veth0_vlan: left promiscuous mode [ 776.509377][T10708] loop8: p235 start 67109111 is beyond EOD, truncated [ 776.535608][T10708] loop8: p237 start 67109111 is beyond EOD, truncated [ 776.543471][T10772] veth0_vlan: entered promiscuous mode [ 776.550705][T10776] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12988'. [ 776.557582][T10772] veth1_vlan: entered promiscuous mode [ 776.565636][T10708] loop8: p239 start 67109111 is beyond EOD, truncated [ 776.573825][T10708] loop8: p241 start 67109111 is beyond EOD, truncated [ 776.585130][T10708] loop8: p243 start 67109111 is beyond EOD, truncated [ 776.592879][T10772] veth1_macvtap: left promiscuous mode [ 776.600211][T10772] veth0_macvtap: left promiscuous mode [ 776.606587][T10779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 776.611049][T10708] loop8: p245 start 67109111 is beyond EOD, truncated [ 776.623110][T10772] veth0_macvtap: entered promiscuous mode [ 776.630406][T10708] loop8: p247 start 67109111 is beyond EOD, truncated [ 776.634721][T10779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 776.642668][T10772] veth1_macvtap: entered promiscuous mode [ 776.661691][T10708] loop8: p249 start 67109111 is beyond EOD, truncated [ 776.679328][T10708] loop8: p251 start 67109111 is beyond EOD, truncated [ 776.693021][T10772] A link change request failed with some changes committed already. Interface wpan0 may have been left with an inconsistent configuration, please check. [ 776.712977][T10708] loop8: p253 start 67109111 is beyond EOD, truncated [ 776.721464][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.728612][ T4190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 776.739611][T10708] loop8: p255 start 67109111 is beyond EOD, truncated [ 776.760890][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.768234][ T4190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 776.853999][T13032] wg1 speed is unknown, defaulting to 1000 [ 776.871345][T13032] syz2: Port: 1 Link ACTIVE [ 776.888134][T10785] sit1: entered allmulticast mode [ 777.081279][T10581] udevd[10581]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 777.093542][T10580] udevd[10580]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 777.105074][T10585] udevd[10585]: inotify_add_watch(7, /dev/loop8p6, 10) failed: No such file or directory [ 777.107028][ T8580] udevd[8580]: inotify_add_watch(7, /dev/loop8p18, 10) failed: No such file or directory [ 777.120372][T10584] udevd[10584]: inotify_add_watch(7, /dev/loop8p8, 10) failed: No such file or directory [ 777.133342][T10587] udevd[10587]: inotify_add_watch(7, /dev/loop8p14, 10) failed: No such file or directory [ 777.146776][T10589] udevd[10589]: inotify_add_watch(7, /dev/loop8p12, 10) failed: No such file or directory [ 777.158752][T10583] udevd[10583]: inotify_add_watch(7, /dev/loop8p16, 10) failed: No such file or directory [ 777.162887][T10581] udevd[10581]: inotify_add_watch(7, /dev/loop8p26, 10) failed: No such file or directory [ 777.169904][T10590] udevd[10590]: inotify_add_watch(7, /dev/loop8p20, 10) failed: No such file or directory [ 777.933753][T10801] tipc: Failed to remove unknown binding: 66,1,1/0:3408495160/3408495162 [ 777.942303][T10801] tipc: Failed to remove unknown binding: 66,1,1/0:3408495160/3408495162 [ 778.080898][T10813] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13003'. [ 778.114294][T10813] netlink: 'syz.5.13003': attribute type 7 has an invalid length. [ 778.135390][T10813] netlink: 'syz.5.13003': attribute type 8 has an invalid length. [ 778.156509][T10813] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13003'. [ 778.189647][T10813] syz_tun: entered promiscuous mode [ 778.201309][T10813] gretap0: entered promiscuous mode [ 778.217127][T10813] erspan0: entered promiscuous mode [ 778.223151][T10813] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network [ 778.239826][T10813] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 778.250313][T10813] hsr1: Interlink (erspan0) is not up; please bring it up to get a fully working HSR network [ 779.679952][T10865] syzkaller1: entered promiscuous mode [ 779.688539][T10865] syzkaller1: entered allmulticast mode [ 780.724707][T10889] loop8: detected capacity change from 0 to 512 [ 781.601331][T10914] netlink: 24 bytes leftover after parsing attributes in process `syz.7.13034'. [ 781.704942][T10916] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10916 comm=syz.7.13034 [ 782.545083][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 782.781424][ T496] Bluetooth: hci0: Frame reassembly failed (-84) [ 782.869455][T10966] syzkaller0: entered promiscuous mode [ 782.875754][T10966] syzkaller0: entered allmulticast mode [ 783.536312][T10996] xfrm0 speed is unknown, defaulting to 1000 [ 783.726246][T10996] lo speed is unknown, defaulting to 1000 [ 783.778069][T10996] wg1 speed is unknown, defaulting to 1000 [ 783.960007][T11012] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13069'. [ 784.027763][T11013] xfrm0 speed is unknown, defaulting to 1000 [ 784.034154][T11012] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11012 comm=syz.2.13069 [ 784.114152][T11013] lo speed is unknown, defaulting to 1000 [ 784.183623][T11013] wg1 speed is unknown, defaulting to 1000 [ 784.263252][T11020] netlink: 276 bytes leftover after parsing attributes in process `syz.8.13073'. [ 784.280788][T11020] netlink: 276 bytes leftover after parsing attributes in process `syz.8.13073'. [ 784.407666][T11025] xfrm0 speed is unknown, defaulting to 1000 [ 784.473933][T11025] lo speed is unknown, defaulting to 1000 [ 784.515516][T11025] wg1 speed is unknown, defaulting to 1000 [ 784.784465][T10962] Bluetooth: hci0: command 0x1003 tx timeout [ 784.785762][ T5382] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 784.901362][T11042] xfrm0 speed is unknown, defaulting to 1000 [ 784.979990][T11042] lo speed is unknown, defaulting to 1000 [ 785.035107][T11042] wg1 speed is unknown, defaulting to 1000 [ 786.660869][T11115] loop8: detected capacity change from 0 to 2048 [ 786.760552][T11115] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 786.783956][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 786.783971][ T28] audit: type=1400 audit(1299.761:29468): avc: denied { write } for pid=11114 comm="syz.8.13108" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 786.823460][T11115] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.13108: bg 0: block 345: padding at end of block bitmap is not set [ 786.847769][T11115] EXT4-fs (loop8): Remounting filesystem read-only [ 786.890959][ T8449] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 787.023135][T11124] ªªªªª6: renamed from wg2 [ 787.589954][T11139] loop8: detected capacity change from 0 to 128 [ 787.730493][T11139] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 787.800740][ T28] audit: type=1400 audit(1300.789:29469): avc: denied { write } for pid=11138 comm="syz.8.13116" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 787.945360][ T8449] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 787.984841][T11151] gre0 speed is unknown, defaulting to 1000 [ 788.035799][T11151] gre0 speed is unknown, defaulting to 1000 [ 788.044779][T11151] gre0 speed is unknown, defaulting to 1000 [ 788.266718][T11155] A link change request failed with some changes committed already. Interface wpan0 may have been left with an inconsistent configuration, please check. [ 788.363473][T15593] gre0 speed is unknown, defaulting to 1000 [ 788.370145][T11151] infiniband syz1: set active [ 788.387665][T11151] infiniband syz1: added gre0 [ 788.565939][T11151] RDS/IB: syz1: added [ 788.570892][T11151] smc: adding ib device syz1 with port count 1 [ 788.577720][T11151] smc: ib device syz1 port 1 has no pnetid [ 788.584012][T15593] gre0 speed is unknown, defaulting to 1000 [ 788.591168][T11151] gre0 speed is unknown, defaulting to 1000 [ 788.633682][T11151] gre0 speed is unknown, defaulting to 1000 [ 788.676689][T11151] gre0 speed is unknown, defaulting to 1000 [ 788.719164][T11151] gre0 speed is unknown, defaulting to 1000 [ 788.761401][T11151] gre0 speed is unknown, defaulting to 1000 [ 788.802749][T11151] gre0 speed is unknown, defaulting to 1000 [ 788.871892][T11151] gre0 speed is unknown, defaulting to 1000 [ 788.913137][T11170] netlink: 'syz.5.13126': attribute type 9 has an invalid length. [ 788.964517][T11151] gre0 speed is unknown, defaulting to 1000 [ 789.033332][T11151] gre0 speed is unknown, defaulting to 1000 [ 789.186794][T11190] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13134'. [ 789.308579][T11199] batadv_slave_0: entered promiscuous mode [ 789.317614][T11199] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13138'. [ 790.396722][T11215] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13146'. [ 790.619809][T11234] syzkaller0: entered promiscuous mode [ 790.629504][T11234] syzkaller0: entered allmulticast mode [ 790.910872][T11240] netlink: 'syz.7.13154': attribute type 27 has an invalid length. [ 791.095111][T11240] bond2: left promiscuous mode [ 791.104693][T11240] bond2: left allmulticast mode [ 791.121789][T11240] gretap2: left allmulticast mode [ 791.164079][T11240] bond7: left promiscuous mode [ 791.173318][T11240] vti0: left promiscuous mode [ 791.188848][T11240] ipvlan0: left allmulticast mode [ 791.204391][T11240] bond8: left allmulticast mode [ 791.221210][T11240] bond9: left promiscuous mode [ 791.237415][T11240] ip6gretap1: left promiscuous mode [ 791.269133][T11240] veth17: left promiscuous mode [ 791.302032][T11240] bond9: left allmulticast mode [ 791.312015][T11240] ip6gretap1: left allmulticast mode [ 791.324019][T11240] veth17: left allmulticast mode [ 791.614206][T11245] loop5: detected capacity change from 0 to 128 [ 791.657913][T11240] bond12: left promiscuous mode [ 791.670741][T11240] sit6: left promiscuous mode [ 791.715332][T11240] bond13: left promiscuous mode [ 791.720976][T11245] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 791.725008][T11240] erspan1: left promiscuous mode [ 791.743770][T11240] bond13: left allmulticast mode [ 791.754376][T11240] erspan1: left allmulticast mode [ 791.867149][T11240] bond14: left promiscuous mode [ 791.892644][T11241] 8021q: adding VLAN 0 to HW filter on device  [ 791.902179][T11253] netlink: 276 bytes leftover after parsing attributes in process `syz.3.13158'. [ 791.917926][T11253] netlink: 276 bytes leftover after parsing attributes in process `syz.3.13158'. [ 791.935061][T11241] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 791.965312][T11241] veth1_macvtap: left promiscuous mode [ 791.986902][T11241] veth0_macvtap: left promiscuous mode [ 792.019730][T11241] veth0_macvtap: entered promiscuous mode [ 792.035972][T11241] veth1_macvtap: entered promiscuous mode [ 792.041107][ T28] audit: type=1400 audit(1817.041:29470): avc: denied { write } for pid=11242 comm="syz.5.13155" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 792.067966][T11241] 8021q: adding VLAN 0 to HW filter on device bond1 [ 792.100629][ T5955] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 792.122249][T11258] netlink: 24 bytes leftover after parsing attributes in process `syz.8.13161'. [ 792.144721][T11241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 792.163036][T11241] 8021q: adding VLAN 0 to HW filter on device bond2 [ 792.172097][T11241] 8021q: adding VLAN 0 to HW filter on device bond3 [ 792.183183][T11241] 8021q: adding VLAN 0 to HW filter on device bond4 [ 792.192500][T11241] 8021q: adding VLAN 0 to HW filter on device bond5 [ 792.203442][T11241] 8021q: adding VLAN 0 to HW filter on device eth0 [ 792.211715][T11241] 8021q: adding VLAN 0 to HW filter on device eth1 [ 792.220164][T11241] 8021q: adding VLAN 0 to HW filter on device eth2 [ 792.227808][T11263] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11263 comm=syz.8.13161 [ 792.230604][T11241] 8021q: adding VLAN 0 to HW filter on device eth3 [ 792.250658][T11241] 8021q: adding VLAN 0 to HW filter on device bond6 [ 792.262404][T11241] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 792.279008][ T474] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.288347][ T474] netdevsim netdevsim7 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 792.297103][ T474] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.308300][ T474] netdevsim netdevsim7 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 792.330222][T13032] xfrm0 speed is unknown, defaulting to 1000 [ 792.336469][T13032] syz0: Port: 1 Link ACTIVE [ 792.368611][ T474] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.391949][ T474] netdevsim netdevsim7 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 792.409531][T14505] xfrm0 speed is unknown, defaulting to 1000 [ 792.413711][ T474] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.426566][ T474] netdevsim netdevsim7 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 792.494975][ T28] audit: type=1400 audit(1817.505:29471): avc: denied { cmd } for pid=11275 comm="syz.7.13165" path="/1555/file0" dev="tmpfs" ino=8025 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=io_uring permissive=1 [ 792.865707][T11290] netlink: 'syz.3.13169': attribute type 11 has an invalid length. [ 794.256328][T11328] netlink: 36 bytes leftover after parsing attributes in process `syz.5.13179'. [ 794.285613][T11328] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13179'. [ 794.302256][T11328] netlink: 36 bytes leftover after parsing attributes in process `syz.5.13179'. [ 794.346873][T11332] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13182'. [ 794.365635][T11332] team1: entered promiscuous mode [ 794.371642][T11332] team1: entered allmulticast mode [ 794.376999][T11332] 8021q: adding VLAN 0 to HW filter on device team1 [ 794.386571][T11335] ªªªªª6: renamed from wg2 (while UP) [ 794.395259][T11332] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13182'. [ 794.433239][T11332] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 794.466561][T11332] team2: entered promiscuous mode [ 794.478905][T11332] team2: entered allmulticast mode [ 794.493205][T11332] 8021q: adding VLAN 0 to HW filter on device team2 [ 794.800676][T11355] netlink: 763 bytes leftover after parsing attributes in process `syz.7.13191'. [ 795.038307][ T28] audit: type=1400 audit(1820.066:29472): avc: denied { connect } for pid=11373 comm="syz.2.13199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 795.296449][T11386] syzkaller0: entered promiscuous mode [ 795.302143][T11386] syzkaller0: entered allmulticast mode [ 795.737728][T11400] netlink: 'syz.7.13211': attribute type 4 has an invalid length. [ 795.771151][T11400] netlink: 'syz.7.13211': attribute type 4 has an invalid length. [ 795.798459][T11403] loop5: detected capacity change from 0 to 2048 [ 795.823552][T11403] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 795.859029][ T28] audit: type=1400 audit(1820.902:29473): avc: denied { write } for pid=11397 comm="syz.5.13210" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 795.960480][ T5955] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 796.104217][T11442] netlink: 24 bytes leftover after parsing attributes in process `syz.7.13225'. [ 796.214364][T11452] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11452 comm=syz.7.13225 [ 796.403178][T11469] netlink: 'syz.7.13235': attribute type 1 has an invalid length. [ 796.433230][T11469] 8021q: adding VLAN 0 to HW filter on device bond15 [ 796.446117][ T28] audit: type=1326 audit(1821.487:29474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11471 comm="syz.3.13237" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9e73cdd9 code=0x7ffc0000 [ 796.488077][T11469] bond15: entered allmulticast mode [ 796.493773][ T28] audit: type=1326 audit(1821.517:29475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11471 comm="syz.3.13237" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9e73cdd9 code=0x7ffc0000 [ 796.540538][T11469] bond15: (slave ip6gretap2): making interface the new active one [ 796.549450][T11469] ip6gretap2: entered allmulticast mode [ 796.558867][T11469] bond15: (slave ip6gretap2): Enslaving as an active interface with an up link [ 796.570916][ T28] audit: type=1326 audit(1821.517:29476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11471 comm="syz.3.13237" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9e73cdd9 code=0x7ffc0000 [ 796.596493][ T28] audit: type=1326 audit(1821.517:29477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11471 comm="syz.3.13237" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4f9e73cdd9 code=0x7ffc0000 [ 796.650281][ T28] audit: type=1326 audit(1821.517:29478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11471 comm="syz.3.13237" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9e73cdd9 code=0x7ffc0000 [ 796.709748][ T28] audit: type=1326 audit(1821.517:29479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11471 comm="syz.3.13237" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9e73cdd9 code=0x7ffc0000 [ 796.983950][T11508] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13252'. [ 797.410137][T11527] tunl0: Caught tx_queue_len zero misconfig [ 797.463432][T11533] rdma_rxe: rxe_newlink: failed to add gre0 [ 797.563085][T11538] netlink: 24 bytes leftover after parsing attributes in process `syz.7.13263'. [ 797.648514][T11533] bond1: left promiscuous mode [ 797.659286][T11533] bridge2: left promiscuous mode [ 797.680349][T11533] team1: left promiscuous mode [ 797.686519][T11533] team2: left promiscuous mode [ 797.692254][T11542] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11542 comm=syz.7.13263 [ 797.929048][T11547] syz.7.13266 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 797.974051][T11547] xfrm0 speed is unknown, defaulting to 1000 [ 798.067263][T11555] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13269'. [ 798.075858][T11547] lo speed is unknown, defaulting to 1000 [ 798.114508][T11555] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11555 comm=syz.2.13269 [ 798.225007][T11547] wg1 speed is unknown, defaulting to 1000 [ 798.231515][T11547] gre0 speed is unknown, defaulting to 1000 [ 798.389756][T11569] sctp: [Deprecated]: syz.2.13271 (pid 11569) Use of int in maxseg socket option. [ 798.389756][T11569] Use struct sctp_assoc_value instead [ 798.797774][T11590] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11590 comm=syz.7.13282 [ 798.918224][T11602] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11602 comm=syz.5.13287 [ 799.727464][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 799.963084][T11639] xfrm0 speed is unknown, defaulting to 1000 [ 800.091620][T11639] lo speed is unknown, defaulting to 1000 [ 800.161618][T11643] loop5: detected capacity change from 0 to 1024 [ 800.181456][T11639] wg1 speed is unknown, defaulting to 1000 [ 800.194737][T11643] EXT4-fs: inline encryption not supported [ 800.203702][T11639] gre0 speed is unknown, defaulting to 1000 [ 800.210146][T11643] EXT4-fs (loop5): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 800.235059][T11643] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 800.266472][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 800.266490][ T28] audit: type=1400 audit(1825.335:29523): avc: denied { write } for pid=11642 comm="syz.5.13302" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 800.358069][ T5955] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 800.970581][T11667] __nla_validate_parse: 4 callbacks suppressed [ 800.970662][T11667] netlink: 60 bytes leftover after parsing attributes in process `syz.7.13308'. [ 800.989323][T11667] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13308'. [ 801.639858][T11699] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13323'. [ 801.718766][T11699] 8021q: adding VLAN 0 to HW filter on device bond4 [ 801.795383][T11701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 801.874215][T11701] bond4: (slave batadv0): Enslaving as an active interface with an up link [ 801.992745][T11703] netlink: 'syz.2.13324': attribute type 13 has an invalid length. [ 802.270766][ T3398] ip6_tunnel:  xmit: Local address not yet configured! [ 802.338179][ T484] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 802.374738][ T484] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.447527][ T3398] ip6_tunnel:  xmit: Local address not yet configured! [ 802.464355][T11721] netlink: 60 bytes leftover after parsing attributes in process `syz.8.13331'. [ 802.489595][ T484] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 802.532020][ T484] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.612539][ T484] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 802.643760][ T484] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.749972][ T484] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 802.793601][ T484] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.938371][ T484] bridge_slave_1: left promiscuous mode [ 802.938529][ T484] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.048966][ T484] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 803.058253][T11748] netlink: 36 bytes leftover after parsing attributes in process `syz.7.13338'. [ 803.069106][ T484] ip6gre1 (unregistering): left promiscuous mode [ 803.076510][T11748] netlink: 16 bytes leftover after parsing attributes in process `syz.7.13338'. [ 803.085882][T11748] netlink: 36 bytes leftover after parsing attributes in process `syz.7.13338'. [ 803.273940][ T484] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 803.284437][ T484] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 803.294606][ T484] bond0 (unregistering): (slave team0): Releasing backup interface [ 803.304851][ T484] bond0 (unregistering): Released all slaves [ 803.312834][ T484] bond1 (unregistering): Released all slaves [ 803.321817][ T484] bond2 (unregistering): Released all slaves [ 803.330294][ T484] bond3 (unregistering): Released all slaves [ 803.470603][T11768] netlink: 76 bytes leftover after parsing attributes in process `syz.3.13340'. [ 803.568026][ T28] audit: type=1400 audit(1828.659:29524): avc: denied { write } for pid=11750 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 803.689408][ T28] audit: type=1400 audit(1828.780:29525): avc: denied { write } for pid=11782 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 803.844116][ T28] audit: type=1326 audit(1828.941:29526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11789 comm="syz.7.13347" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6b796bcdd9 code=0x0 [ 804.123747][ T484] hsr_slave_0: left promiscuous mode [ 804.163348][ T484] hsr_slave_1: left promiscuous mode [ 804.169310][ T484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 804.182554][ T484] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 804.209959][ T484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 804.219741][ T484] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 804.239264][ T484] veth1_macvtap: left promiscuous mode [ 804.253503][ T484] veth0_macvtap: left promiscuous mode [ 804.265947][ T484] veth1_vlan: left promiscuous mode [ 804.284659][ T484] veth0_vlan: left promiscuous mode [ 804.418435][ T484] team0 (unregistering): Port device team_slave_1 removed [ 804.429860][ T484] team0 (unregistering): Port device team_slave_0 removed [ 804.519310][ T3021] 8021q: adding VLAN 0 to HW filter on device eth33 [ 804.706605][ T484] IPVS: stop unused estimator thread 0... [ 804.727324][T11811] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13352'. [ 804.787662][ T28] audit: type=1400 audit(1829.887:29527): avc: denied { write } for pid=11801 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 804.870754][ T28] audit: type=1400 audit(1829.968:29528): avc: denied { write } for pid=11819 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 804.940362][ T3021] 8021q: adding VLAN 0 to HW filter on device eth34 [ 805.176152][T11837] xfrm0 speed is unknown, defaulting to 1000 [ 805.211321][ T28] audit: type=1400 audit(1830.320:29529): avc: denied { write } for pid=11826 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 805.300525][ T28] audit: type=1400 audit(1830.411:29530): avc: denied { write } for pid=11844 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 805.345666][T11837] lo speed is unknown, defaulting to 1000 [ 805.396021][ T3021] 8021q: adding VLAN 0 to HW filter on device eth35 [ 805.485233][T11837] wg1 speed is unknown, defaulting to 1000 [ 805.506853][T11837] gre0 speed is unknown, defaulting to 1000 [ 805.522283][ T28] audit: type=1400 audit(1830.632:29531): avc: denied { connect } for pid=11853 comm="syz.5.13361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 805.773201][ T28] audit: type=1400 audit(1830.874:29532): avc: denied { write } for pid=11855 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 805.845711][ T28] audit: type=1400 audit(1830.954:29533): avc: denied { write } for pid=11876 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 805.905570][ T3021] 8021q: adding VLAN 0 to HW filter on device eth36 [ 806.643147][T11924] netlink: 'syz.3.13380': attribute type 11 has an invalid length. [ 806.833985][T11926] sctp: [Deprecated]: syz.8.13381 (pid 11926) Use of int in maxseg socket option. [ 806.833985][T11926] Use struct sctp_assoc_value instead [ 807.051290][T11945] xfrm0 speed is unknown, defaulting to 1000 [ 807.102093][T11945] lo speed is unknown, defaulting to 1000 [ 807.187271][T11945] wg1 speed is unknown, defaulting to 1000 [ 807.199601][T11945] gre0 speed is unknown, defaulting to 1000 [ 807.506748][T11962] netlink: 'syz.5.13393': attribute type 10 has an invalid length. [ 807.532403][T11962] netlink: 16154 bytes leftover after parsing attributes in process `syz.5.13393'. [ 807.608954][T11971] netlink: 24 bytes leftover after parsing attributes in process `syz.8.13406'. [ 807.617148][T11969] netlink: 'syz.3.13395': attribute type 21 has an invalid length. [ 807.663889][T11969] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13395'. [ 807.702876][T11971] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11971 comm=syz.8.13406 [ 807.799754][T11988] loop8: detected capacity change from 0 to 128 [ 807.828167][T11991] sctp: [Deprecated]: syz.5.13397 (pid 11991) Use of int in maxseg socket option. [ 807.828167][T11991] Use struct sctp_assoc_value instead [ 807.846653][T11986] xfrm0 speed is unknown, defaulting to 1000 [ 807.878032][T11994] loop8: detected capacity change from 0 to 512 [ 807.891695][T11994] EXT4-fs error (device loop8): ext4_quota_enable:7221: comm syz.8.13407: Bad quota inum: 2, type: 1 [ 807.904812][T11994] loop8: lost filesystem error report for type 5 error -117 [ 807.906224][T11994] EXT4-fs warning (device loop8): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 807.913690][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 807.913715][ C1] EXT4-fs (loop8): initial error at time 1833: ext4_quota_enable:7221 [ 807.913743][ C1] EXT4-fs (loop8): last error at time 1833: ext4_quota_enable:7221 [ 808.018025][T11986] lo speed is unknown, defaulting to 1000 [ 808.046853][T11994] EXT4-fs (loop8): mount failed [ 808.126250][T12009] xfrm0 speed is unknown, defaulting to 1000 [ 808.144242][T11986] wg1 speed is unknown, defaulting to 1000 [ 808.152525][T11986] gre0 speed is unknown, defaulting to 1000 [ 808.228204][T12009] lo speed is unknown, defaulting to 1000 [ 808.303199][T12009] wg1 speed is unknown, defaulting to 1000 [ 808.310609][T12009] gre0 speed is unknown, defaulting to 1000 [ 808.722277][T12021] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13414'. [ 810.975101][T12021] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 811.016627][T12033] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13417'. [ 811.221499][ T28] audit: type=1400 audit(1836.369:29534): avc: denied { connect } for pid=12044 comm="syz.5.13421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 811.279945][T12053] sctp: [Deprecated]: syz.3.13419 (pid 12053) Use of int in maxseg socket option. [ 811.279945][T12053] Use struct sctp_assoc_value instead [ 811.381877][ T28] audit: type=1400 audit(1836.530:29535): avc: denied { create } for pid=12060 comm="syz.5.13427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 811.492057][T12061] loop5: detected capacity change from 0 to 8192 [ 811.582399][T12066] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13431'. [ 811.607270][T12068] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13432'. [ 811.638573][T12066] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13431'. [ 811.701592][T12068] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12068 comm=syz.2.13432 [ 811.920376][T12090] netlink: 12 bytes leftover after parsing attributes in process `syz.8.13449'. [ 811.976850][T12090] bond4: entered promiscuous mode [ 812.002619][T12090] 8021q: adding VLAN 0 to HW filter on device bond4 [ 812.057262][T12090] 8021q: adding VLAN 0 to HW filter on device bond4 [ 812.057891][T12061] syz.5.13427 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 812.076250][T12061] CPU: 0 UID: 0 PID: 12061 Comm: syz.5.13427 Tainted: G W syzkaller #0 PREEMPT(full) [ 812.076363][T12061] Tainted: [W]=WARN [ 812.076371][T12061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 812.076384][T12061] Call Trace: [ 812.076391][T12061] [ 812.076401][T12061] __dump_stack+0x1d/0x30 [ 812.076433][T12061] dump_stack_lvl+0x95/0xd0 [ 812.076461][T12061] dump_stack+0x15/0x1b [ 812.076496][T12061] dump_header+0x80/0x240 [ 812.076522][T12061] oom_kill_process+0x295/0x350 [ 812.076676][T12061] out_of_memory+0x97d/0xb80 [ 812.076718][T12061] try_charge_memcg+0x62f/0xa10 [ 812.076763][T12061] charge_memcg+0x6d/0x120 [ 812.076837][T12061] __mem_cgroup_charge+0x28/0xb0 [ 812.076916][T12061] filemap_add_folio+0x110/0x350 [ 812.076959][T12061] __filemap_get_folio_mpol+0x326/0x680 [ 812.077023][T12061] filemap_fault+0x462/0xb70 [ 812.077120][T12061] ? __pfx_filemap_map_pages+0x10/0x10 [ 812.077154][T12061] handle_mm_fault+0x16cb/0x2e70 [ 812.077269][T12061] ? __pfx_filemap_fault+0x10/0x10 [ 812.077324][T12061] __get_user_pages+0x1290/0x1f10 [ 812.077379][T12061] __mm_populate+0x242/0x390 [ 812.077481][T12061] __se_sys_mlockall+0x35f/0x3c0 [ 812.077523][T12061] __x64_sys_mlockall+0x1f/0x30 [ 812.077565][T12061] x64_sys_call+0xf90/0x3020 [ 812.077620][T12061] do_syscall_64+0x12c/0x3b0 [ 812.077655][T12061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.077684][T12061] RIP: 0033:0x7f8ee0aecdd9 [ 812.077703][T12061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 812.077772][T12061] RSP: 002b:00007f8edf53f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 812.077795][T12061] RAX: ffffffffffffffda RBX: 00007f8ee0d65fa0 RCX: 00007f8ee0aecdd9 [ 812.077811][T12061] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 812.077824][T12061] RBP: 00007f8ee0b82d69 R08: 0000000000000000 R09: 0000000000000000 [ 812.077838][T12061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 812.077878][T12061] R13: 00007f8ee0d66038 R14: 00007f8ee0d65fa0 R15: 00007ffcadbb3628 [ 812.077946][T12061] [ 812.077974][T12061] memory: usage 307172kB, limit 307200kB, failcnt 1284 [ 812.086759][T12091] sctp: [Deprecated]: syz.7.13439 (pid 12091) Use of int in maxseg socket option. [ 812.086759][T12091] Use struct sctp_assoc_value instead [ 812.090533][T12061] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 812.090554][T12061] kmem: usage 300648kB, limit 9007199254740988kB, failcnt 0 [ 812.090571][T12061] Memory cgroup stats for /syz5: [ 812.091137][T12061] cache 6131712 [ 812.123903][T12090] bond4: (slave sit3): The slave device specified does not support setting the MAC address [ 812.128476][T12061] rss 573440 [ 812.128488][T12061] shmem 4194304 [ 812.200245][T12090] bond4: (slave sit3): Error -95 calling set_mac_address [ 812.326072][T12061] mapped_file 1773568 [ 812.326086][T12061] dirty 8192 [ 812.326094][T12061] writeback 0 [ 812.326103][T12061] workingset_refault_anon 225 [ 812.326112][T12061] workingset_refault_file 4847 [ 812.326122][T12061] swap 0 [ 812.326131][T12061] swapcached 18534400 [ 812.326140][T12061] pgpgin 443339 [ 812.326149][T12061] pgpgout 441701 [ 812.326160][T12061] pgfault 469052 [ 812.441187][T12061] pgmajfault 2187 [ 812.447262][T12061] inactive_anon 4562944 [ 812.453760][T12061] active_anon 0 [ 812.466684][T12061] inactive_file 155648 [ 812.472873][T12061] active_file 12288 [ 812.479042][T12061] unevictable 1978368 [ 812.485304][T12061] hierarchical_memory_limit 314572800 [ 812.502665][T12061] hierarchical_memsw_limit 9223372036854771712 [ 812.529288][T12061] total_cache 6131712 [ 812.542189][T12061] total_rss 573440 [ 812.557373][T12061] total_shmem 4194304 [ 812.571692][T12061] total_mapped_file 1773568 [ 812.587225][T12061] total_dirty 8192 [ 812.601614][T12061] total_writeback 0 [ 812.611370][T12061] total_workingset_refault_anon 225 [ 812.616777][T12061] total_workingset_refault_file 4847 [ 812.622540][T12061] total_swap 0 [ 812.627990][T12061] total_swapcached 18534400 [ 812.637420][T12061] total_pgpgin 443339 [ 812.664333][T12061] total_pgpgout 441701 [ 812.682375][T12061] total_pgfault 469052 [ 812.691460][T12061] total_pgmajfault 2187 [ 812.700003][T12061] total_inactive_anon 4562944 [ 812.710631][T12061] total_active_anon 0 [ 812.719335][T12061] total_inactive_file 155648 [ 812.729711][T12061] total_active_file 12288 [ 812.760543][T12061] total_unevictable 1978368 [ 812.809970][T12061] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.13427,pid=12060,uid=0 [ 812.908460][T12114] netlink: 116376 bytes leftover after parsing attributes in process `syz.8.13444'. [ 813.572840][T12061] Memory cgroup out of memory: Killed process 12060 (syz.5.13427) total-vm:96348kB, anon-rss:1436kB, file-rss:56588kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:1000 [ 813.855158][T12124] loop5: detected capacity change from 0 to 1024 [ 813.997946][T12124] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 814.014458][ T28] audit: type=1400 audit(1839.176:29536): avc: denied { write } for pid=12123 comm="syz.5.13446" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 814.089382][ T30] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: comm kworker/u8:1: lblock 0 mapped to illegal pblock 0 (length 6) [ 814.129994][ T30] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 814.168237][ T30] EXT4-fs (loop5): This should not happen!! Data will be lost [ 814.168237][ T30] [ 814.196599][ T30] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:1: lblock 8 mapped to illegal pblock 8 (length 8) [ 814.233116][ T30] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 814.260722][ T30] EXT4-fs (loop5): This should not happen!! Data will be lost [ 814.260722][ T30] [ 814.692415][T12146] loop8: detected capacity change from 0 to 1764 [ 814.718316][T12146] ISOFS: Unable to identify CD-ROM format. [ 814.845853][T12124] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.13446: bg 0: block 112: padding at end of block bitmap is not set [ 814.862322][T12124] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 2016 with max blocks 2048 with error 28 [ 814.875532][T12124] EXT4-fs (loop5): This should not happen!! Data will be lost [ 814.875532][T12124] [ 814.885497][T12124] EXT4-fs (loop5): Total free blocks count 0 [ 814.892820][T12124] EXT4-fs (loop5): Free/Dirty block details [ 814.899266][T12124] EXT4-fs (loop5): free_blocks=0 [ 815.012679][ T5955] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 815.118883][T12169] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13462'. [ 815.162418][T12171] syz_tun: entered allmulticast mode [ 815.181228][T12171] dvmrp8: entered allmulticast mode [ 815.191491][T12170] syz_tun: left allmulticast mode [ 815.233546][T12176] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12176 comm=syz.5.13466 [ 815.246561][T12176] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12176 comm=syz.5.13466 [ 815.259224][T12176] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12176 comm=syz.5.13466 [ 815.271895][T12176] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12176 comm=syz.5.13466 [ 815.284539][T12176] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12176 comm=syz.5.13466 [ 815.297268][T12176] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12176 comm=syz.5.13466 [ 815.310054][T12176] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12176 comm=syz.5.13466 [ 815.322705][T12176] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12176 comm=syz.5.13466 [ 815.335490][T12176] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12176 comm=syz.5.13466 [ 815.348145][T12176] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12176 comm=syz.5.13466 [ 815.631750][T12205] netlink: 'syz.7.13478': attribute type 4 has an invalid length. [ 815.644953][T12205] netlink: 'syz.7.13478': attribute type 4 has an invalid length. [ 816.185756][T12225] loop5: detected capacity change from 0 to 512 [ 816.196545][T12225] EXT4-fs: Ignoring removed nobh option [ 816.206500][T12225] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 816.224787][T12225] EXT4-fs (loop5): 1 truncate cleaned up [ 816.240526][T12225] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 816.260526][ T28] audit: type=1400 audit(1841.439:29537): avc: denied { write } for pid=12224 comm="syz.5.13483" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 816.469315][T12229] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13484'. [ 816.577339][T12233] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13486'. [ 816.632227][ T5955] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 816.811743][T12242] syzkaller0: entered promiscuous mode [ 816.822621][T12242] syzkaller0: entered allmulticast mode [ 817.100370][T12269] netlink: 12 bytes leftover after parsing attributes in process `syz.8.13499'. [ 817.311394][T12278] syzkaller0: entered promiscuous mode [ 817.331935][T12278] syzkaller0: entered allmulticast mode [ 817.514138][ T28] audit: type=1400 audit(1842.697:29538): avc: denied { write } for pid=12285 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 817.564937][T12309] netlink: 'syz.5.13516': attribute type 1 has an invalid length. [ 817.594334][T12309] 8021q: adding VLAN 0 to HW filter on device bond5 [ 817.608778][T12309] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13516'. [ 817.618206][T12309] bond5: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 817.635458][T12309] bond5: entered allmulticast mode [ 817.648146][T12309] bond5: (slave ip6gretap2): Enslaving as an active interface with an up link [ 817.658314][ T28] audit: type=1400 audit(1842.827:29539): avc: denied { write } for pid=12313 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 817.784474][T12318] xfrm0 speed is unknown, defaulting to 1000 [ 817.955756][ T28] audit: type=1400 audit(1843.139:29540): avc: denied { write } for pid=12325 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 817.956589][T12318] lo speed is unknown, defaulting to 1000 [ 818.046132][ T28] audit: type=1400 audit(1843.230:29541): avc: denied { write } for pid=12339 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 818.189290][T12318] wg1 speed is unknown, defaulting to 1000 [ 818.191292][T12344] netlink: 'syz.2.13510': attribute type 10 has an invalid length. [ 818.236346][T12344] netlink: 16154 bytes leftover after parsing attributes in process `syz.2.13510'. [ 818.259003][T12318] gre0 speed is unknown, defaulting to 1000 [ 818.334491][T12366] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13513'. [ 818.361519][ T28] audit: type=1400 audit(1843.551:29542): avc: denied { write } for pid=12348 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 818.427723][ T28] audit: type=1400 audit(1843.622:29543): avc: denied { write } for pid=12373 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 818.741966][ T28] audit: type=1400 audit(1843.923:29544): avc: denied { write } for pid=12379 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 818.816126][T12403] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13522'. [ 818.833865][ T28] audit: type=1400 audit(1844.024:29545): avc: denied { write } for pid=12401 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 818.945439][T12400] batman_adv: batadv0: Adding interface: dummy0 [ 818.954104][T12400] batman_adv: batadv0: Interface activated: dummy0 [ 818.977542][T12405] batadv0: mtu less than device minimum [ 818.984805][T12412] netlink: 24 bytes leftover after parsing attributes in process `syz.8.13524'. [ 819.004147][T12405] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 819.015193][T12405] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 819.026196][T12405] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 819.037370][T12405] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 819.048473][T12405] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 819.059284][T12405] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 819.070395][T12405] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 819.081564][T12405] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 819.092955][T12405] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 819.157278][T12409] xfrm0 speed is unknown, defaulting to 1000 [ 819.225676][T12417] netlink: 'syz.8.13526': attribute type 10 has an invalid length. [ 819.246730][T12417] netlink: 16154 bytes leftover after parsing attributes in process `syz.8.13526'. [ 819.259418][T12427] loop5: detected capacity change from 0 to 512 [ 819.267462][T12427] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 819.289892][T12409] lo speed is unknown, defaulting to 1000 [ 819.299250][T12427] EXT4-fs (loop5): orphan cleanup on readonly fs [ 819.311937][T12427] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 819.328259][T12427] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 819.336213][T12427] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.13528: bad orphan inode 32 [ 819.346964][T12427] loop5: lost filesystem error report for type 5 error -117 [ 819.347221][T12427] ext4_test_bit(bit=31, block=2) = 0 [ 819.354786][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 819.354807][ C1] EXT4-fs (loop5): initial error at time 1844: ext4_orphan_get:1423 [ 819.354831][ C1] EXT4-fs (loop5): last error at time 1844: ext4_orphan_get:1423 [ 819.383940][T12427] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 819.405480][T12431] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 819.413137][T12431] IPv6: NLM_F_CREATE should be set when creating new route [ 819.493263][T12409] wg1 speed is unknown, defaulting to 1000 [ 819.499610][T12409] gre0 speed is unknown, defaulting to 1000 [ 819.542246][T12410] siw: device registration error -23 [ 819.934088][T12455] netlink: 24 bytes leftover after parsing attributes in process `syz.8.13541'. [ 819.994094][ T5955] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 820.023440][T12454] netlink: 136 bytes leftover after parsing attributes in process `syz.3.13542'. [ 820.061158][T12455] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13541'. [ 820.070757][T12461] veth0_macvtap: Caught tx_queue_len zero misconfig [ 820.091661][T12463] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 820.102104][T12463] bridge6: entered promiscuous mode [ 820.142537][T12467] netlink: 'syz.3.13547': attribute type 16 has an invalid length. [ 820.254494][T12467] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.261892][T12467] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.305986][T12467] batman_adv: batadv0: Interface deactivated: dummy0 [ 821.174729][ T3349] gre0 speed is unknown, defaulting to 1000 [ 821.191369][T14510] wg1 speed is unknown, defaulting to 1000 [ 821.199766][ T3349] syz1: Port: 1 Link DOWN [ 821.233245][T14510] syz2: Port: 1 Link DOWN [ 821.250122][ T9] gre0 speed is unknown, defaulting to 1000 [ 821.503373][T12498] netlink: 'syz.3.13557': attribute type 39 has an invalid length. [ 822.262541][T12513] loop8: detected capacity change from 0 to 256 [ 823.347868][T12588] bond12: option min_links: invalid value (18446744073709551612) [ 823.376611][T12588] bond12: option min_links: allowed values 0 - 2147483647 [ 823.412466][T12588] bond12 (unregistering): Released all slaves [ 826.145122][T12683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13602'. [ 826.182122][T12679] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 826.278259][T12688] xfrm0 speed is unknown, defaulting to 1000 [ 826.331653][T12703] loop8: detected capacity change from 0 to 128 [ 826.473583][T12688] lo speed is unknown, defaulting to 1000 [ 826.483114][T12710] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 826.491102][T12710] IPv6: NLM_F_CREATE should be set when creating new route [ 826.510936][T12711] loop8: detected capacity change from 0 to 1024 [ 826.538950][T12711] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 826.555152][T12711] System zones: 0-1, 3-36 [ 826.565727][T12688] wg1 speed is unknown, defaulting to 1000 [ 826.572023][T12688] gre0 speed is unknown, defaulting to 1000 [ 826.578824][T12711] EXT4-fs error (device loop8): ext4_orphan_get:1423: comm syz.8.13612: bad orphan inode 134217728 [ 826.589759][T12711] loop8: lost filesystem error report for type 5 error -117 [ 826.593939][T12711] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 826.660137][ T8449] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 826.943444][T12729] loop5: detected capacity change from 0 to 512 [ 826.966881][T12729] EXT4-fs: Ignoring removed nomblk_io_submit option [ 826.985160][T12729] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 826.996347][T12729] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 827.019130][T12729] EXT4-fs error (device loop5): ext4_init_orphan_info:583: comm syz.5.13618: inode #0: comm syz.5.13618: iget: illegal inode # [ 827.035489][T12729] loop5: lost filesystem error report for type 5 error -117 [ 827.036184][T12729] EXT4-fs (loop5): Remounting filesystem read-only [ 827.044016][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 827.044075][ C0] EXT4-fs (loop5): initial error at time 1852: ext4_init_orphan_info:583 [ 827.044274][ C0] EXT4-fs (loop5): last error at time 1852: ext4_init_orphan_info:583 [ 827.078521][T12729] EXT4-fs (loop5): get orphan inode failed [ 827.085504][T12729] EXT4-fs (loop5): mount failed [ 827.182520][T12742] loop5: detected capacity change from 0 to 128 [ 827.190281][T12742] vfat: Unknown parameter '' [ 827.328393][T12750] xfrm0 speed is unknown, defaulting to 1000 [ 827.342974][T12748] loop5: detected capacity change from 0 to 1024 [ 827.372204][T12748] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 827.391666][T12748] System zones: 0-1, 3-36 [ 827.429755][T12748] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.13625: bad orphan inode 134217728 [ 827.453504][T12748] loop5: lost filesystem error report for type 5 error -117 [ 827.480205][T12748] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 827.531826][T12750] lo speed is unknown, defaulting to 1000 [ 827.703246][ T5955] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 827.761003][T12761] xfrm0 speed is unknown, defaulting to 1000 [ 827.786645][T12750] wg1 speed is unknown, defaulting to 1000 [ 827.811870][T12750] gre0 speed is unknown, defaulting to 1000 [ 827.888652][T12761] lo speed is unknown, defaulting to 1000 [ 828.021146][T12761] wg1 speed is unknown, defaulting to 1000 [ 828.035272][ T28] audit: type=1326 audit(1853.272:29546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12749 comm="syz.3.13626" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4f9e73cdd9 code=0x0 [ 828.065484][T12761] gre0 speed is unknown, defaulting to 1000 [ 829.044144][T12781] syzkaller0: entered promiscuous mode [ 829.060842][T12781] syzkaller0: entered allmulticast mode [ 829.935140][T12817] xfrm0 speed is unknown, defaulting to 1000 [ 829.971086][T12804] netlink: 156 bytes leftover after parsing attributes in process `syz.8.13643'. [ 830.032964][T12817] lo speed is unknown, defaulting to 1000 [ 830.090277][T12817] wg1 speed is unknown, defaulting to 1000 [ 830.097259][T12817] gre0 speed is unknown, defaulting to 1000 [ 830.366513][ T28] audit: type=1326 audit(1855.623:29547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12816 comm="syz.5.13647" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ee0aecdd9 code=0x0 [ 830.572991][T12827] loop8: detected capacity change from 0 to 8192 [ 830.865652][T12836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13654'. [ 832.638108][T12845] loop5: detected capacity change from 0 to 512 [ 832.653947][T12849] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 832.661727][T12849] IPv6: NLM_F_CREATE should be set when creating new route [ 832.669571][T12849] IPv6: NLM_F_CREATE should be set when creating new route [ 833.065225][T12854] bond6: option min_links: invalid value (18446744073709551612) [ 833.451096][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 833.827959][T12854] bond6: option min_links: allowed values 0 - 2147483647 [ 833.839671][T12854] bond6 (unregistering): Released all slaves [ 834.032908][T12871] ref_ctr_offset mismatch. inode: 0x5d7 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000 [ 834.068756][T12871] xt_hashlimit: size too large, truncated to 1048576 [ 834.788605][T12893] futex_wake_op: syz.7.13674 tries to shift op by -9; fix this program [ 834.812544][T12895] netlink: 'syz.8.13675': attribute type 1 has an invalid length. [ 834.858883][T12895] 8021q: adding VLAN 0 to HW filter on device bond6 [ 834.896507][T12899] vlan2: entered allmulticast mode [ 834.908355][T12899] bond6: entered allmulticast mode [ 834.956445][T12895] bond6: (slave geneve2): making interface the new active one [ 834.972844][T12895] geneve2: entered allmulticast mode [ 834.985725][T12895] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 835.022489][T12909] netlink: 'syz.7.13679': attribute type 10 has an invalid length. [ 835.701557][T12947] bond16: option min_links: invalid value (18446744073709551612) [ 835.710206][T12947] bond16: option min_links: allowed values 0 - 2147483647 [ 835.732682][T12947] bond16 (unregistering): Released all slaves [ 835.870475][T12955] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13695'. [ 835.937289][T12957] loop5: detected capacity change from 0 to 1024 [ 835.961603][T12957] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 835.973274][T12957] EXT4-fs (loop5): The Hurd can't support 64-bit file systems [ 836.055969][T12963] xfrm0 speed is unknown, defaulting to 1000 [ 836.063841][T12965] batadv_slave_0: Caught tx_queue_len zero misconfig [ 836.149950][T12968] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13700'. [ 836.170166][T12963] lo speed is unknown, defaulting to 1000 [ 836.217063][T12963] wg1 speed is unknown, defaulting to 1000 [ 836.223693][T12963] gre0 speed is unknown, defaulting to 1000 [ 836.290818][T12980] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 836.374941][T12982] netlink: 'syz.3.13703': attribute type 3 has an invalid length. [ 836.892202][T12987] bond5: option min_links: invalid value (18446744073709551612) [ 836.916274][T12987] bond5: option min_links: allowed values 0 - 2147483647 [ 836.931749][T12995] loop8: detected capacity change from 0 to 128 [ 836.983889][T12995] vfat: Unknown parameter '' [ 837.140751][T12987] bond5 (unregistering): Released all slaves [ 838.250141][T13029] loop8: detected capacity change from 0 to 1024 [ 838.308204][T13029] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 838.318884][T13029] System zones: 0-1, 3-36 [ 838.336401][T13029] EXT4-fs error (device loop8): ext4_orphan_get:1423: comm syz.8.13720: bad orphan inode 134217728 [ 838.348590][T13029] loop8: lost filesystem error report for type 5 error -117 [ 838.349715][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 838.364511][ C0] EXT4-fs (loop8): initial error at time 1863: ext4_orphan_get:1423 [ 838.373693][ C0] EXT4-fs (loop8): last error at time 1863: ext4_orphan_get:1423 [ 838.396023][T13029] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 838.460579][ T8449] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 838.561444][T13043] bond6: option min_links: invalid value (18446744073709551612) [ 838.569545][T13043] bond6: option min_links: allowed values 0 - 2147483647 [ 838.592629][T13043] bond6 (unregistering): Released all slaves [ 838.678039][T13047] syzkaller0: entered promiscuous mode [ 838.684307][T13047] syzkaller0: entered allmulticast mode [ 839.433514][T13066] tmpfs: Bad value for 'size' [ 840.281747][T13084] bridge0: port 4(ip6gretap0) entered blocking state [ 840.301221][T13084] bridge0: port 4(ip6gretap0) entered disabled state [ 840.318151][T13084] ip6gretap0: entered allmulticast mode [ 840.340973][T13084] ip6gretap0: entered promiscuous mode [ 840.366842][T13084] bridge0: port 4(ip6gretap0) entered blocking state [ 840.375198][T13084] bridge0: port 4(ip6gretap0) entered forwarding state [ 840.410635][T13089] ip6gretap0: left allmulticast mode [ 840.417159][T13089] ip6gretap0: left promiscuous mode [ 840.426205][T13089] bridge0: port 4(ip6gretap0) entered disabled state [ 840.494368][T13088] bond6: option min_links: invalid value (18446744073709551612) [ 840.502420][T13088] bond6: option min_links: allowed values 0 - 2147483647 [ 840.513788][T13088] bond6 (unregistering): Released all slaves [ 840.679143][T13102] bond6: option min_links: invalid value (18446744073709551612) [ 840.687455][T13102] bond6: option min_links: allowed values 0 - 2147483647 [ 840.708473][T13102] bond6 (unregistering): Released all slaves [ 840.939522][ T28] audit: type=1400 audit(1866.240:29548): avc: denied { accept } for pid=13111 comm="syz.7.13747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 841.357271][ T28] audit: type=1326 audit(1866.651:29549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13115 comm="syz.3.13748" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9e73cdd9 code=0x7ffc0000 [ 841.471595][T13116] selinux_netlink_send: 75 callbacks suppressed [ 841.471648][T13116] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13116 comm=syz.3.13748 [ 841.500947][ T28] audit: type=1326 audit(1866.651:29550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13115 comm="syz.3.13748" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9e73cdd9 code=0x7ffc0000 [ 841.527018][ T28] audit: type=1326 audit(1866.681:29551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13115 comm="syz.3.13748" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9e73cdd9 code=0x7ffc0000 [ 841.552313][ T28] audit: type=1326 audit(1866.681:29553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13115 comm="syz.3.13748" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4f9e73cdd9 code=0x7ffc0000 [ 841.578214][ T28] audit: type=1326 audit(1866.681:29552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13115 comm="syz.3.13748" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9e73cdd9 code=0x7ffc0000 [ 841.610066][ T28] audit: type=1326 audit(1866.732:29554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13115 comm="syz.3.13748" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9e73cdd9 code=0x7ffc0000 [ 841.661721][ T28] audit: type=1326 audit(1866.732:29555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13115 comm="syz.3.13748" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9e73cdd9 code=0x7ffc0000 [ 841.713734][ T28] audit: type=1326 audit(1866.732:29556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13115 comm="syz.3.13748" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9e73cdd9 code=0x7ffc0000 [ 842.038791][ T28] audit: type=1326 audit(1866.732:29557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13115 comm="syz.3.13748" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7f4f9e73cdd9 code=0x7ffc0000 [ 842.322155][ T9] IPVS: starting estimator thread 0... [ 842.432983][T13136] IPVS: using max 2256 ests per chain, 112800 per kthread [ 842.457611][T13147] IPVS: sync thread started: state = BACKUP, mcast_ifn = geneve1, syncid = 0, id = 0 [ 842.467371][T13146] IPVS: stopping backup sync thread 13147 ... [ 842.516024][T13149] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 842.533259][T13149] netlink: 'syz.3.13759': attribute type 2 has an invalid length. [ 842.759245][T13162] SELinux: Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped). [ 842.790027][T13162] netlink: 16 bytes leftover after parsing attributes in process `syz.8.13763'. [ 843.867135][T13183] netlink: 'syz.5.13769': attribute type 16 has an invalid length. [ 844.353073][T13205] netlink: 'syz.8.13777': attribute type 29 has an invalid length. [ 844.379456][T13205] netlink: 'syz.8.13777': attribute type 29 has an invalid length. [ 844.405938][T13207] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 844.612413][ T5955] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 845.112409][ T5955] CPU: 0 UID: 0 PID: 5955 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 845.112565][ T5955] Tainted: [W]=WARN [ 845.112574][ T5955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 845.112590][ T5955] Call Trace: [ 845.112598][ T5955] [ 845.112608][ T5955] __dump_stack+0x1d/0x30 [ 845.112638][ T5955] dump_stack_lvl+0x95/0xd0 [ 845.112662][ T5955] dump_stack+0x15/0x1b [ 845.112695][ T5955] dump_header+0x80/0x240 [ 845.112769][ T5955] oom_kill_process+0x295/0x350 [ 845.112807][ T5955] out_of_memory+0x97d/0xb80 [ 845.112844][ T5955] try_charge_memcg+0x62f/0xa10 [ 845.112885][ T5955] charge_memcg+0x6d/0x120 [ 845.112969][ T5955] __mem_cgroup_charge+0x28/0xb0 [ 845.112999][ T5955] filemap_add_folio+0x110/0x350 [ 845.113163][ T5955] __filemap_get_folio_mpol+0x326/0x680 [ 845.113203][ T5955] filemap_fault+0x462/0xb70 [ 845.113244][ T5955] ? __pfx_filemap_map_pages+0x10/0x10 [ 845.113291][ T5955] handle_mm_fault+0x16cb/0x2e70 [ 845.113322][ T5955] ? __pfx_filemap_fault+0x10/0x10 [ 845.113517][ T5955] do_user_addr_fault+0x62f/0x1050 [ 845.113553][ T5955] ? trace_page_fault_user+0x1f/0xa0 [ 845.113588][ T5955] exc_page_fault+0x62/0xa0 [ 845.113670][ T5955] asm_exc_page_fault+0x26/0x30 [ 845.113758][ T5955] RIP: 0033:0x7f8ee09badf4 [ 845.113778][ T5955] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 c0 a9 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d b9 a8 ed 00 48 01 d1 [ 845.113800][ T5955] RSP: 002b:00007ffcadbb3990 EFLAGS: 00010202 [ 845.113819][ T5955] RAX: 0000001b30e24000 RBX: 0000000000000493 RCX: 00000000000ce0e0 [ 845.113835][ T5955] RDX: 000000000e059a0a RSI: 00007ffcadbb3a20 RDI: 0000000000000001 [ 845.113851][ T5955] RBP: 00007ffcadbb39cc R08: 00000000357d3e6e R09: 3fffffffffffffff [ 845.113941][ T5955] R10: 4000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 845.113957][ T5955] R13: 00000000000927c0 R14: 00000000000ce24f R15: 00007ffcadbb3a20 [ 845.113980][ T5955] [ 845.114020][ T5955] memory: usage 282500kB, limit 307200kB, failcnt 3770 [ 845.374112][ T5955] memory+swap: usage 202160kB, limit 9007199254740988kB, failcnt 0 [ 845.382463][ T5955] kmem: usage 126952kB, limit 9007199254740988kB, failcnt 0 [ 845.389822][ T5955] Memory cgroup stats for /syz5: [ 845.390091][ T5955] cache 70164480 [ 845.398906][ T5955] rss 552960 [ 845.403073][ T5955] shmem 70041600 [ 845.406671][ T5955] mapped_file 0 [ 845.410161][ T5955] dirty 0 [ 845.413507][ T5955] writeback 0 [ 845.417143][ T5955] workingset_refault_anon 225 [ 845.422275][ T5955] workingset_refault_file 6975 [ 845.427137][ T5955] swap 0 [ 845.430028][ T5955] swapcached 18534400 [ 845.435034][ T5955] pgpgin 487780 [ 845.438627][ T5955] pgpgout 470514 [ 845.442559][ T5955] pgfault 507353 [ 845.446168][ T5955] pgmajfault 2194 [ 845.449994][ T5955] inactive_anon 1900544 [ 845.454713][ T5955] active_anon 68694016 [ 845.455881][T13215] uprobe: syz.2.13781:13215 failed to unregister, leaking uprobe [ 845.458824][ T5955] inactive_file 0 [ 845.458837][ T5955] active_file 4096 [ 845.494680][ T5955] unevictable 122880 [ 845.507392][ T5955] hierarchical_memory_limit 314572800 [ 845.524468][ T5955] hierarchical_memsw_limit 9223372036854771712 [ 845.541712][ T5955] total_cache 70164480 [ 845.550921][ T5955] total_rss 552960 [ 845.561493][ T5955] total_shmem 70041600 [ 845.566559][ T5955] total_mapped_file 0 [ 845.576622][ T5955] total_dirty 0 [ 845.586199][ T5955] total_writeback 0 [ 845.591813][ T5955] total_workingset_refault_anon 225 [ 845.607267][ T5955] total_workingset_refault_file 6975 [ 845.623764][ T5955] total_swap 0 [ 845.637147][T13222] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 845.660322][ T5955] total_swapcached 18534400 [ 845.677246][ T5955] total_pgpgin 487780 [ 845.722546][ T5955] total_pgpgout 470514 [ 845.735512][ T5955] total_pgfault 507353 [ 845.752567][ T5955] total_pgmajfault 2194 [ 845.760859][ T5955] total_inactive_anon 1900544 [ 845.837292][T13223] xfrm0 speed is unknown, defaulting to 1000 [ 846.303506][ T5955] total_active_anon 68694016 [ 846.308190][ T5955] total_inactive_file 0 [ 846.312371][ T5955] total_active_file 4096 [ 846.316624][ T5955] total_unevictable 122880 [ 846.321085][ T5955] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.12871,pid=10431,uid=0 [ 846.336669][ T5955] Memory cgroup out of memory: Killed process 10431 (syz.5.12871) total-vm:96084kB, anon-rss:1404kB, file-rss:20804kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 846.369238][T13223] lo speed is unknown, defaulting to 1000 [ 846.431293][T13223] wg1 speed is unknown, defaulting to 1000 [ 846.437986][T13223] gre0 speed is unknown, defaulting to 1000 [ 846.603892][T13238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13787'. [ 847.437966][T13259] ref_ctr_offset mismatch. inode: 0x198a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000 [ 847.484117][T13259] xt_hashlimit: size too large, truncated to 1048576 [ 848.056537][T13281] bond12: option min_links: invalid value (18446744073709551612) [ 848.067763][T13281] bond12: option min_links: allowed values 0 - 2147483647 [ 848.085261][T13281] bond12 (unregistering): Released all slaves [ 849.691740][T13317] bond16: option min_links: invalid value (18446744073709551612) [ 849.765782][T13317] bond16: option min_links: allowed values 0 - 2147483647 [ 849.778720][T13317] bond16 (unregistering): Released all slaves [ 849.998059][T13326] netlink: 156 bytes leftover after parsing attributes in process `syz.5.13813'. [ 850.017713][T13335] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13822'. [ 850.040726][T13335] tipc: Enabling of bearer rejected, failed to enable media [ 850.274517][T13354] tmpfs: Bad value for 'size' [ 850.452656][T13361] IPVS: sync thread started: state = BACKUP, mcast_ifn = geneve1, syncid = 0, id = 0 [ 850.453018][T13360] IPVS: stopping backup sync thread 13361 ... [ 850.607005][T13367] bond12: option min_links: invalid value (18446744073709551612) [ 850.638598][T13367] bond12: option min_links: allowed values 0 - 2147483647 [ 850.686725][T13367] bond12 (unregistering): Released all slaves [ 851.485817][T13387] netlink: 156 bytes leftover after parsing attributes in process `syz.3.13839'. [ 852.761537][ T28] kauditd_printk_skb: 64 callbacks suppressed [ 852.761562][ T28] audit: type=1326 audit(1878.094:29622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13422 comm="syz.8.13853" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f051682cdd9 code=0x7ffc0000 [ 852.958405][ T28] audit: type=1326 audit(1878.134:29623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13422 comm="syz.8.13853" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f051682cdd9 code=0x7ffc0000 [ 852.992144][ T28] audit: type=1326 audit(1878.184:29624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13422 comm="syz.8.13853" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f051682cdd9 code=0x7ffc0000 [ 853.058638][ T28] audit: type=1326 audit(1878.184:29625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13422 comm="syz.8.13853" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f051682cdd9 code=0x7ffc0000 [ 853.162764][ T28] audit: type=1326 audit(1878.184:29626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13422 comm="syz.8.13853" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f051682cdd9 code=0x7ffc0000 [ 853.189255][ T28] audit: type=1326 audit(1878.184:29627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13422 comm="syz.8.13853" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f051682cdd9 code=0x7ffc0000 [ 853.245986][ T28] audit: type=1326 audit(1878.184:29628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13422 comm="syz.8.13853" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f051682cdd9 code=0x7ffc0000 [ 853.347329][ T28] audit: type=1326 audit(1878.184:29629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13422 comm="syz.8.13853" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f051682cdd9 code=0x7ffc0000 [ 853.422350][ T28] audit: type=1326 audit(1878.184:29631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13422 comm="syz.8.13853" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f051682cdd9 code=0x7ffc0000 [ 853.488606][ T28] audit: type=1326 audit(1878.184:29632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13422 comm="syz.8.13853" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f051682cdd9 code=0x7ffc0000 [ 853.560770][T13438] netlink: 'syz.3.13860': attribute type 1 has an invalid length. [ 853.632066][T13442] bond5: (slave bridge7): Enslaving as a backup interface with an up link [ 853.676530][T13438] macvlan2: entered promiscuous mode [ 853.693494][T13438] macvlan2: entered allmulticast mode [ 853.723989][T13438] bond5: entered promiscuous mode [ 853.744478][T13438] bridge7: entered promiscuous mode [ 853.769739][T13438] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 853.812362][T13438] bond5: left promiscuous mode [ 853.832390][T13438] bridge7: left promiscuous mode [ 855.811425][T13459] bridge0: port 3(syz_tun) entered disabled state [ 855.876179][T13459] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.883426][T13459] bridge0: port 1(bridge_slave_0) entered disabled state [ 856.471633][T13465] tmpfs: Bad value for 'size' [ 857.590343][T13459] sit1: left allmulticast mode [ 857.651005][T13459] team1: left allmulticast mode [ 857.656910][T13459] team2: left allmulticast mode [ 857.968328][T13459] vlan2: left allmulticast mode [ 857.973334][T13459] bond6: left allmulticast mode [ 857.978337][T13459] geneve2: left allmulticast mode [ 857.991562][T13457] xfrm0 speed is unknown, defaulting to 1000 [ 857.994148][T13460] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 858.003493][T13463] bridge10: the hash_elasticity option has been deprecated and is always 16 [ 858.028370][T13460] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 858.048029][T13463] bridge10: entered promiscuous mode [ 858.133479][T13518] tmpfs: Bad value for 'size' [ 858.140953][T13457] lo speed is unknown, defaulting to 1000 [ 858.195673][T13457] wg1 speed is unknown, defaulting to 1000 [ 858.202555][T13457] gre0 speed is unknown, defaulting to 1000 [ 858.418289][T13529] IPVS: persistence engine module ip_vs_pe_€ not found [ 858.614149][T13545] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13887'. [ 858.630716][T13545] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13887'. [ 859.560489][T13585] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13914'. [ 860.204981][T13606] netlink: 28 bytes leftover after parsing attributes in process `syz.8.13911'. [ 860.243716][T13605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13912'. [ 860.442533][T13622] lo: entered allmulticast mode [ 860.470667][T13621] lo: left allmulticast mode [ 861.758460][T13664] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22741, delta: 1 [ 861.776015][T13664] ref_ctr increment failed for inode: 0xa2f offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888104bea1c0 [ 861.799663][T13664] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22741, delta: -1 [ 861.813594][T13664] ref_ctr decrement failed for inode: 0xa2f offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888104bea1c0 [ 861.827516][T13664] uprobe: syz.5.13936:13664 failed to unregister, leaking uprobe [ 861.837143][T13666] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13937'. [ 861.882840][T13666] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13666 comm=syz.3.13937 [ 862.016402][T13678] bridge6: left promiscuous mode [ 862.134816][T13683] netlink: 'syz.2.13942': attribute type 1 has an invalid length. [ 863.902567][T13724] IPVS: persistence engine module ip_vs_pe_€ not found [ 864.313522][T13752] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13966'. [ 864.361030][T13755] netlink: 108 bytes leftover after parsing attributes in process `syz.8.13967'. [ 865.042655][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 865.042671][ T28] audit: type=1326 audit(1890.423:29681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13787 comm="syz.3.13991" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9e73cdd9 code=0x7ffc0000 [ 865.100616][ T28] audit: type=1326 audit(1890.453:29682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13787 comm="syz.3.13991" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9e73cdd9 code=0x7ffc0000 [ 865.144022][ T28] audit: type=1326 audit(1890.453:29683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13787 comm="syz.3.13991" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9e73cdd9 code=0x7ffc0000 [ 865.169617][ T28] audit: type=1326 audit(1890.453:29684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13787 comm="syz.3.13991" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f4f9e73cdd9 code=0x7ffc0000 [ 865.195493][ T28] audit: type=1326 audit(1890.473:29685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13787 comm="syz.3.13991" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9e73cdd9 code=0x7ffc0000 [ 865.227314][ T28] audit: type=1326 audit(1890.473:29686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13787 comm="syz.3.13991" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9e73cdd9 code=0x7ffc0000 [ 865.253817][ T28] audit: type=1326 audit(1890.473:29687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13787 comm="syz.3.13991" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9e73cdd9 code=0x7ffc0000 [ 865.279936][ T28] audit: type=1326 audit(1890.473:29688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13787 comm="syz.3.13991" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4f9e73cdd9 code=0x7ffc0000 [ 865.305818][ T28] audit: type=1326 audit(1890.473:29689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13787 comm="syz.3.13991" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9e73cdd9 code=0x7ffc0000 [ 865.334088][ T28] audit: type=1326 audit(1890.473:29690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13787 comm="syz.3.13991" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9e73cdd9 code=0x7ffc0000 [ 865.404249][T13800] netlink: 300 bytes leftover after parsing attributes in process `syz.2.13986'. [ 865.430638][T13800] netlink: 300 bytes leftover after parsing attributes in process `syz.2.13986'. [ 865.668610][T13809] xfrm0 speed is unknown, defaulting to 1000 [ 866.430908][T13809] lo speed is unknown, defaulting to 1000 [ 866.529981][T13809] wg1 speed is unknown, defaulting to 1000 [ 866.536302][T13809] gre0 speed is unknown, defaulting to 1000 [ 866.844091][T13848] netlink: 277 bytes leftover after parsing attributes in process `syz.2.14004'. [ 867.275021][T13856] tipc: Started in network mode [ 867.292558][T13856] tipc: Node identity ac14140f, cluster identity 4711 [ 867.313327][T13856] tipc: Enabled bearer , priority 10 [ 867.507235][T13833] syz.5.13999 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 867.521893][T13833] CPU: 0 UID: 0 PID: 13833 Comm: syz.5.13999 Tainted: G W syzkaller #0 PREEMPT(full) [ 867.521967][T13833] Tainted: [W]=WARN [ 867.521973][T13833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 867.521985][T13833] Call Trace: [ 867.521991][T13833] [ 867.521999][T13833] __dump_stack+0x1d/0x30 [ 867.522020][T13833] dump_stack_lvl+0x95/0xd0 [ 867.522119][T13833] dump_stack+0x15/0x1b [ 867.522137][T13833] dump_header+0x80/0x240 [ 867.522156][T13833] oom_kill_process+0x295/0x350 [ 867.522184][T13833] out_of_memory+0x97d/0xb80 [ 867.522237][T13833] try_charge_memcg+0x62f/0xa10 [ 867.522348][T13833] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 867.522370][T13833] __alloc_frozen_pages_noprof+0x18a/0x350 [ 867.522398][T13833] alloc_pages_mpol+0xb3/0x260 [ 867.522496][T13833] alloc_pages_noprof+0x8f/0x140 [ 867.522523][T13833] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 867.522581][T13833] __kvmalloc_node_noprof+0x3d4/0x640 [ 867.522658][T13833] ? futex_hash_allocate+0x190/0x9a0 [ 867.522686][T13833] ? futex_hash_allocate+0x190/0x9a0 [ 867.522740][T13833] futex_hash_allocate+0x190/0x9a0 [ 867.522767][T13833] ? cap_task_prctl+0x13f/0x6b0 [ 867.522869][T13833] futex_hash_prctl+0xd8/0xf0 [ 867.522899][T13833] __se_sys_prctl+0x4f4/0x1400 [ 867.522993][T13833] __x64_sys_prctl+0x67/0x80 [ 867.523015][T13833] x64_sys_call+0x2533/0x3020 [ 867.523036][T13833] do_syscall_64+0x12c/0x3b0 [ 867.523060][T13833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.523079][T13833] RIP: 0033:0x7f8ee0aecdd9 [ 867.523187][T13833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 867.523203][T13833] RSP: 002b:00007f8edf53f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 867.523220][T13833] RAX: ffffffffffffffda RBX: 00007f8ee0d65fa0 RCX: 00007f8ee0aecdd9 [ 867.523232][T13833] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 867.523310][T13833] RBP: 00007f8ee0b82d69 R08: 0000000000000000 R09: 0000000000000000 [ 867.523322][T13833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 867.523333][T13833] R13: 00007f8ee0d66038 R14: 00007f8ee0d65fa0 R15: 00007ffcadbb3628 [ 867.523351][T13833] [ 867.523382][T13833] memory: usage 307200kB, limit 307200kB, failcnt 4435 [ 867.752210][T13833] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 867.760172][T13833] kmem: usage 227352kB, limit 9007199254740988kB, failcnt 0 [ 867.767513][T13833] Memory cgroup stats for /syz5: [ 867.767768][T13833] cache 69578752 [ 867.776269][T13833] rss 12148736 [ 867.780014][T13833] shmem 69447680 [ 867.783633][T13833] mapped_file 4096 [ 867.787476][T13833] dirty 0 [ 867.790474][T13833] writeback 0 [ 867.793777][T13833] workingset_refault_anon 225 [ 867.798557][T13833] workingset_refault_file 7450 [ 867.803342][T13833] swap 0 [ 867.806220][T13833] swapcached 18534400 [ 867.810252][T13833] pgpgin 507470 [ 867.813729][T13833] pgpgout 487516 [ 867.817314][T13833] pgfault 535651 [ 867.820878][T13833] pgmajfault 2202 [ 867.824537][T13833] inactive_anon 71307264 [ 867.828840][T13833] active_anon 1900544 [ 867.832851][T13833] inactive_file 0 [ 867.836506][T13833] active_file 4096 [ 867.840325][T13833] unevictable 8511488 [ 867.844325][T13833] hierarchical_memory_limit 314572800 [ 867.849736][T13833] hierarchical_memsw_limit 9223372036854771712 [ 867.855973][T13833] total_cache 69578752 [ 867.860131][T13833] total_rss 12148736 [ 867.864060][T13833] total_shmem 69447680 [ 867.868205][T13833] total_mapped_file 4096 [ 867.872456][T13833] total_dirty 0 [ 867.875938][T13833] total_writeback 0 [ 867.879783][T13833] total_workingset_refault_anon 225 [ 867.885004][T13833] total_workingset_refault_file 7450 [ 867.890452][T13833] total_swap 0 [ 867.894017][T13833] total_swapcached 18534400 [ 867.898628][T13833] total_pgpgin 507470 [ 867.902648][T13833] total_pgpgout 487516 [ 867.906771][T13833] total_pgfault 535651 [ 867.910933][T13833] total_pgmajfault 2202 [ 867.915192][T13833] total_inactive_anon 71307264 [ 867.920076][T13833] total_active_anon 1900544 [ 867.924602][T13833] total_inactive_file 0 [ 867.929248][T13833] total_active_file 4096 [ 867.933564][T13833] total_unevictable 8511488 [ 867.938128][T13833] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.13049,pid=10953,uid=0 [ 867.957554][T13833] Memory cgroup out of memory: Killed process 10953 (syz.5.13049) total-vm:94036kB, anon-rss:1404kB, file-rss:20484kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:1000 [ 868.015339][T13833] syz.5.13999 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 868.053713][T13833] CPU: 0 UID: 0 PID: 13833 Comm: syz.5.13999 Tainted: G W syzkaller #0 PREEMPT(full) [ 868.053825][T13833] Tainted: [W]=WARN [ 868.053841][T13833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 868.053857][T13833] Call Trace: [ 868.053865][T13833] [ 868.053874][T13833] __dump_stack+0x1d/0x30 [ 868.053902][T13833] dump_stack_lvl+0x95/0xd0 [ 868.053942][T13833] dump_stack+0x15/0x1b [ 868.053991][T13833] dump_header+0x80/0x240 [ 868.054013][T13833] oom_kill_process+0x295/0x350 [ 868.054055][T13833] out_of_memory+0x97d/0xb80 [ 868.054102][T13833] try_charge_memcg+0x62f/0xa10 [ 868.054159][T13833] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 868.054196][T13833] __alloc_frozen_pages_noprof+0x18a/0x350 [ 868.054234][T13833] alloc_pages_mpol+0xb3/0x260 [ 868.054395][T13833] alloc_pages_noprof+0x8f/0x140 [ 868.054430][T13833] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 868.054477][T13833] __kvmalloc_node_noprof+0x3d4/0x640 [ 868.054508][T13833] ? futex_hash_allocate+0x190/0x9a0 [ 868.054608][T13833] ? futex_hash_allocate+0x190/0x9a0 [ 868.054648][T13833] futex_hash_allocate+0x190/0x9a0 [ 868.054684][T13833] ? cap_task_prctl+0x13f/0x6b0 [ 868.054783][T13833] futex_hash_prctl+0xd8/0xf0 [ 868.054829][T13833] __se_sys_prctl+0x4f4/0x1400 [ 868.054953][T13833] __x64_sys_prctl+0x67/0x80 [ 868.055066][T13833] x64_sys_call+0x2533/0x3020 [ 868.055166][T13833] do_syscall_64+0x12c/0x3b0 [ 868.055192][T13833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.055213][T13833] RIP: 0033:0x7f8ee0aecdd9 [ 868.055228][T13833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 868.055252][T13833] RSP: 002b:00007f8edf53f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 868.055332][T13833] RAX: ffffffffffffffda RBX: 00007f8ee0d65fa0 RCX: 00007f8ee0aecdd9 [ 868.055346][T13833] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 868.055358][T13833] RBP: 00007f8ee0b82d69 R08: 0000000000000000 R09: 0000000000000000 [ 868.055414][T13833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 868.055432][T13833] R13: 00007f8ee0d66038 R14: 00007f8ee0d65fa0 R15: 00007ffcadbb3628 [ 868.055459][T13833] [ 868.277337][T13833] memory: usage 307196kB, limit 307200kB, failcnt 4636 [ 868.286491][T13833] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 868.298227][T13833] kmem: usage 227448kB, limit 9007199254740988kB, failcnt 0 [ 868.305568][T13833] Memory cgroup stats for /syz5: [ 868.306657][T13833] cache 69693440 [ 868.319080][T13833] rss 11968512 [ 868.324508][T13833] shmem 69447680 [ 868.329575][T13833] mapped_file 0 [ 868.337118][T13877] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14013'. [ 868.341084][T13833] dirty 0 [ 868.362693][T13833] writeback 0 [ 868.369295][T13833] workingset_refault_anon 225 [ 868.377741][T13833] workingset_refault_file 7530 [ 868.385736][T13833] swap 0 [ 868.392654][T13833] swapcached 18534400 [ 868.398909][T13833] pgpgin 507550 [ 868.405418][T13833] pgpgout 487612 [ 868.414041][T13833] pgfault 535659 [ 868.417716][T13833] pgmajfault 2209 [ 868.423054][T13833] inactive_anon 5455872 [ 868.427951][ T3412] tipc: Node number set to 2886997007 [ 868.436989][T13833] active_anon 67571712 [ 868.444167][T13833] inactive_file 8192 [ 868.449780][T13833] active_file 28672 [ 868.456535][T13833] unevictable 8511488 [ 868.463619][T13833] hierarchical_memory_limit 314572800 [ 868.475405][T13833] hierarchical_memsw_limit 9223372036854771712 [ 868.490541][T13833] total_cache 69693440 [ 868.497350][T13833] total_rss 11968512 [ 868.507251][T13833] total_shmem 69447680 [ 868.516059][T13833] total_mapped_file 0 [ 868.546073][T13833] total_dirty 0 [ 868.556476][T13833] total_writeback 0 [ 868.565251][T13833] total_workingset_refault_anon 225 [ 868.575973][T13833] total_workingset_refault_file 7530 [ 868.586081][T13833] total_swap 0 [ 868.593533][T13833] total_swapcached 18534400 [ 868.603688][T13833] total_pgpgin 507550 [ 868.613655][T13833] total_pgpgout 487612 [ 868.622328][T13833] total_pgfault 535659 [ 868.630372][T13833] total_pgmajfault 2209 [ 868.642248][T13833] total_inactive_anon 5455872 [ 868.650746][T13833] total_active_anon 67571712 [ 868.659311][T13833] total_inactive_file 8192 [ 868.685940][T13833] total_active_file 28672 [ 868.695671][T13833] total_unevictable 8511488 [ 868.704871][T13833] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.13999,pid=13832,uid=0 [ 868.736336][T13833] Memory cgroup out of memory: Killed process 13832 (syz.5.13999) total-vm:161884kB, anon-rss:12904kB, file-rss:22428kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:0 [ 868.937493][T13892] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 869.749487][T13912] netlink: 'syz.2.14031': attribute type 39 has an invalid length. [ 869.756068][T13914] bond4: entered allmulticast mode [ 869.775414][T13913] bond4: left allmulticast mode [ 870.297978][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 870.297996][ T28] audit: type=1326 audit(1895.688:29695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13934 comm="syz.2.14040" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c3b3cdd9 code=0x7ffc0000 [ 870.335660][ T28] audit: type=1326 audit(1895.728:29696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13934 comm="syz.2.14040" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c3b3cdd9 code=0x7ffc0000 [ 870.335957][T13937] tipc: Enabled bearer , priority 10 [ 870.362532][ T28] audit: type=1326 audit(1895.728:29697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13934 comm="syz.2.14040" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c3b3cdd9 code=0x7ffc0000 [ 870.396841][ T28] audit: type=1326 audit(1895.728:29698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13934 comm="syz.2.14040" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7fd8c3b3cdd9 code=0x7ffc0000 [ 870.407306][T13941] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14041'. [ 870.455469][ T28] audit: type=1326 audit(1895.728:29699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13934 comm="syz.2.14040" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c3b3cdd9 code=0x7ffc0000 [ 870.481823][ T28] audit: type=1326 audit(1895.728:29700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13934 comm="syz.2.14040" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c3b3cdd9 code=0x7ffc0000 [ 870.507356][ T28] audit: type=1326 audit(1895.728:29701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13934 comm="syz.2.14040" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c3b3cdd9 code=0x7ffc0000 [ 870.582433][ T28] audit: type=1326 audit(1895.728:29702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13934 comm="syz.2.14040" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c3b3cdd9 code=0x7ffc0000 [ 870.593085][T13946] syz_tun: entered allmulticast mode [ 870.623855][T13945] syz_tun: left allmulticast mode [ 870.649465][ T28] audit: type=1326 audit(1895.728:29703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13934 comm="syz.2.14040" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd8c3b3cdd9 code=0x7ffc0000 [ 870.718996][ T28] audit: type=1326 audit(1895.728:29704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13934 comm="syz.2.14040" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c3b3cdd9 code=0x7ffc0000 [ 871.337527][ T5613] tipc: Node number set to 2663210292 [ 872.540998][T13978] kexec: Could not allocate control_code_buffer [ 873.769983][T14002] bond12: entered allmulticast mode [ 873.783776][T14002] sit6: entered allmulticast mode [ 873.803401][T14001] bond12: left allmulticast mode [ 873.815955][T14001] sit6: left allmulticast mode [ 874.356407][T14003] ================================================================== [ 874.364586][T14003] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 874.371597][T14003] [ 874.373973][T14003] read-write to 0xffff888139c50ba4 of 4 bytes by task 13995 on cpu 1: [ 874.382143][T14003] fifo_open+0x86/0x5d0 [ 874.386415][T14003] do_dentry_open+0x4be/0xa90 [ 874.391123][T14003] vfs_open+0x37/0x1e0 [ 874.395216][T14003] path_openat+0x1b70/0x2050 [ 874.399843][T14003] do_file_open+0x16c/0x290 [ 874.404373][T14003] do_sys_openat2+0x94/0x130 [ 874.409009][T14003] __se_sys_openat2+0x193/0x1f0 [ 874.413903][T14003] __x64_sys_openat2+0x55/0x70 [ 874.418757][T14003] x64_sys_call+0x2170/0x3020 [ 874.423479][T14003] do_syscall_64+0x12c/0x3b0 [ 874.428109][T14003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.434031][T14003] [ 874.436372][T14003] read to 0xffff888139c50ba4 of 4 bytes by task 14003 on cpu 0: [ 874.444035][T14003] wait_for_partner+0xd5/0x1e0 [ 874.448845][T14003] fifo_open+0x462/0x5d0 [ 874.453126][T14003] do_dentry_open+0x4be/0xa90 [ 874.457831][T14003] vfs_open+0x37/0x1e0 [ 874.461929][T14003] path_openat+0x1b70/0x2050 [ 874.466548][T14003] do_file_open+0x16c/0x290 [ 874.471088][T14003] do_sys_openat2+0x94/0x130 [ 874.475702][T14003] __x64_sys_openat+0xf2/0x120 [ 874.480483][T14003] x64_sys_call+0x1e39/0x3020 [ 874.485198][T14003] do_syscall_64+0x12c/0x3b0 [ 874.489816][T14003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.495737][T14003] [ 874.498074][T14003] value changed: 0x00000001 -> 0x00000002 [ 874.503802][T14003] [ 874.506154][T14003] Reported by Kernel Concurrency Sanitizer on: [ 874.512320][T14003] CPU: 0 UID: 0 PID: 14003 Comm: syz.8.14063 Tainted: G W syzkaller #0 PREEMPT(full) [ 874.523377][T14003] Tainted: [W]=WARN [ 874.527195][T14003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 874.537295][T14003] ==================================================================